Sign Windows build and bump version

Dashlane · Jan 16, 2024 · cae795f · cae795f
1 parent 8368d87
commit cae795f
Show file tree

Hide file tree

Showing 3 changed files with 37 additions and 3 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -41,11 +41,44 @@ jobs:
                   path: bundle/dcli-${{ matrix.settings.target }}${{ matrix.settings.extension }}
                   retention-days: 1
 
-    release:
+    sign:
         runs-on: ubuntu-latest
         needs: build
+        steps:
+            - name: Sign Artifact with CodeSignTool
+              uses: sslcom/esigner-codesign@develop
+              with:
+                  command: sign
+                  username: ${{ secrets.ES_USERNAME }}
+                  password: ${{ secrets.ES_PASSWORD }}
+                  # Credential ID for signing certificate.
+                  credential_id: ${{ secrets.CREDENTIAL_ID }}
+                  # OAuth TOTP Secret (https://www.ssl.com/how-to/automate-esigner-ev-code-signing)
+                  totp_secret: ${{ secrets.ES_TOTP_SECRET }}
+                  # Path of code object to be signed
+                  file_path: ${GITHUB_WORKSPACE}/bundle/dcli-win-x64.exe
+                  # Directory where signed code object(s) will be written.
+                  output_path: ${GITHUB_WORKSPACE}/signed
+                  malware_block: false
+                  environment_name: PROD
+
+            - run: mv signed/dcli-win-x64.exe signed/dcli-win-x64-signed.exe
+
+            - name: Archive binary artifact
+              uses: actions/upload-artifact@v3
+              with:
+                  name: dcli-win-x64-signed
+                  path: signed/dcli-win-x64-signed.exe
+                  retention-days: 1
+
+    release:
+        runs-on: ubuntu-latest
+        needs:
+            - build
+            - sign
         steps:
             - uses: actions/checkout@v3
+
             - name: Download all artifacts
               uses: actions/download-artifact@v3
               with:
@@ -62,3 +95,4 @@ jobs:
                       artifacts/dcli-linux-x64/dcli-linux-x64
                       artifacts/dcli-macos-x64/dcli-macos-x64
                       artifacts/dcli-win-x64/dcli-win-x64.exe
+                      artifacts/dcli-win-x64-signed/dcli-win-x64-signed.exe
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@dashlane/cli",
-    "version": "1.15.1",
+    "version": "1.15.2",
     "description": "Manage your Dashlane vault through a CLI tool",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",

diff --git a/src/cliVersion.ts b/src/cliVersion.ts
@@ -1,6 +1,6 @@
 import { CliVersion } from './types';
 
-export const CLI_VERSION: CliVersion = { major: 1, minor: 15, patch: 1 };
+export const CLI_VERSION: CliVersion = { major: 1, minor: 15, patch: 2 };
 export const breakingChangesVersions: CliVersion[] = [];
 
 export const cliVersionToString = (version: CliVersion): string => {