From a2bd409d5125c3cab30c3b5efaae1eaa5b250513 Mon Sep 17 00:00:00 2001 From: Jay Lee Date: Wed, 27 Aug 2025 12:24:28 -0400 Subject: [PATCH] [no ci] actions: verbose cert verification output --- .github/workflows/build.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 4e5d05fb..ef7bcfb7 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -658,7 +658,7 @@ jobs: Start-Process -Wait -NoNewWindow -ErrorAction Continue -FilePath 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe' -ArgumentList "sign", "/sha1", "590dc5bb10dfb31dbff38c0e2f9c35ef0f6d0e9e", "/tr", "http://time.certum.pl", "/td", "SHA256", "/fd", "SHA256", "/v", "$env:gam" write-Host "Verifying signature of ${env:gam}...." # verify signature. If we failed to sign we should fail to verify and die. - & 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe' verify /pa "$env:gam" + & 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe' verify /pa /v "$env:gam" - name: Configure user and service account auth id: configserviceaccount @@ -730,7 +730,7 @@ jobs: Start-Process -Wait -NoNewWindow -ErrorAction Continue -FilePath 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe' -ArgumentList "sign", "/sha1", "590dc5bb10dfb31dbff38c0e2f9c35ef0f6d0e9e", "/tr", "http://time.certum.pl", "/td", "SHA256", "/fd", "SHA256", "/v", "$env:MSI_FILENAME" write-Host "Verifying signature of ${env:MSI_FILENAME}...." # verify signature. If we failed to sign we should fail to verify and die. - & 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe' verify /pa "$env:MSI_FILENAME" + & 'C:\Program Files (x86)\Windows Kits\10\bin\10.0.26100.0\x64\signtool.exe' verify /pa /v "$env:MSI_FILENAME" - name: Attest that gam package files were generated from this Action uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # 2.4.0