From 26d3c0622e78f52ba7d6e13bcb6f49411a8aee8f Mon Sep 17 00:00:00 2001
From: Oleg Shparber <oleg@zealdocs.org>
Date: Sat, 29 Apr 2023 00:42:38 -0400
Subject: [PATCH] ci(github): sign executable for Windows

---
 .github/workflows/build-check.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build-check.yml b/.github/workflows/build-check.yml
index 0923b27..6418317 100644
--- a/.github/workflows/build-check.yml
+++ b/.github/workflows/build-check.yml
@@ -152,9 +152,19 @@ jobs:
           "ZEAL_VERSION=$zeal_version" >> $env:GITHUB_ENV
 
       - name: Install
-        if: matrix.config.os == 'windows-2022'
+        if: matrix.config.publishArtifacts
         run: cmake --build build/${{ matrix.config.configurePreset }} --config RelWithDebInfo --target install
 
+      - name: Sign Artifacts
+        if: matrix.config.publishArtifacts && github.repository == 'zealdocs/zeal' && github.event_name == 'push'
+        uses: dlemstra/code-sign-action@v1
+        with:
+          certificate: ${{ secrets.CODESIGN_CERTIFICATE }}
+          password: ${{ secrets.CODESIGN_PASSWORD }}
+          folder: build/${{ matrix.config.configurePreset }}/bin/RelWithDebInfo
+          files: |
+            zeal.exe
+
       - name: Upload Artifacts
         if: matrix.config.publishArtifacts
         uses: actions/upload-artifact@v3