Skip to content
award

GitHub Action

Code sign a file with pfx certificate (digicert)

v7 Latest version

Code sign a file with pfx certificate (digicert)

award

Code sign a file with pfx certificate (digicert)

Sign a file with a pfx certificate

Installation

Copy and paste the following snippet into your .yml file.

              

- name: Code sign a file with pfx certificate (digicert)

uses: GermanBluefox/code-sign-action@v7

Learn more about this action in GermanBluefox/code-sign-action

Choose a version

Thank you to Dirk Lemstra for providing a base for me to create this action.

Code sign a file

This action signs files that are supported by signtool.exe with a code signing certificate that takes in a password. This action only works on Windows and that means it should run on windows-latest.

Inputs

certificate

Required The base64 encoded certificate.

password

Required Certificate Password. Used to add to the machine store.

certificatesha1

Required SHA1 hash for the certificate. You can obtain this from Microsoft Management Console after double clicking on your certificate (called Thumbprint). This and/or the certificatename is required for the signing to be successful.

certificatename

Required The name of the certificate. This and/or the certificatesha1 is required for the signing to be successful.

folder

Required The folder that contains the libraries to sign.

recursive

Optional Recursively search for DLL files.

timestampUrl

Optional Url of the timestamp server. Default is 'http://timestamp.digicert.com'

Example usage

runs-on: windows-latest
steps:
  uses: DanaBear/code-sign-action@v4
  with:
    certificate: '${{ secrets.CERTIFICATE }}'
    password: '${{ secrets.PASSWORD }}'
    certificatesha1: '${{ secrets.CERTHASH }}'
    certificatename: '${{ secrets.CERTNAME }}'
    folder: 'files'
    recursive: true