I thought I had found a solution with SignPath's (https://signpath.org/) free certs for open source, but I ran into two snags with them.
- I can't use custom runners in my github workflow. I was using a larger runner (still github hosted, I just picked a larger size) to run my tests faster, and SignPath failed the job because it didn't recognize the runner name. So I would have to go back to a standard runner with a name they recognize, which runs my tests about 3x slower.
- I have to approve each package signing, which means that a release process that was fully automated now has a step I have to manually approve.
I raised both of these issues with SignPath over a week ago, and I have yet to get a response, or to even have my signing certificate issued. So I'm about to give up on them.
Windows is only about 10% of my user base, so right now I'm leaning towards just continuing to not sign my Windows releases. But before I throw in the towel, I wanted to ask if anyone here knows of a better way to handle this.
Oh, and shameless plug for my project, a kubernetes management app: https://github.com/luxury-yacht/app/
1 comments