Code sign a file

This action signs .nupkg files and files that are supported by signtool.exe with a code signing certificate. This action only works on Windows build agents, and that means it will only run on windows-2019, windows-2022 or windows-latest.

Inputs

`certificate`

Required The base64 encoded certificate.

This can created by converting your pfx file to a base64 encoded string with the following command

certutil -encode .\ssCertInfo.pfx .\ssCertInfo.base64.txt

Once you run the command, you will need to ensure that the data is saved in your secret as seen here

You may find the secrets page by navigating to Settings > Secrets > Actions on your current repo.

`password`

Optional The password to use when opening the PFX file.

`folder`

Optional The folder that contains the files to sign.

`recursive`

Optional Recursively search for supported files in the specified folder.

`files`

Optional The paths to the files to sign.

`description`

Optional The description of the signed content, only available for signtool (same as /d for signtool).

Example usage

runs-on: windows-latest
steps:
  uses: dlemstra/code-sign-action@v1
  with:
    certificate: '${{ secrets.CERTIFICATE }}'
    password: '${{ secrets.CERTIFICATE_PASSWORD }}'
    folder: 'files'
    recursive: true
    files: |
      file1
      file2
    description: 'TestName'