Skip to content

Commit 487c272

Browse files
committed
Add signature verification step to release-test workflow
Extract and display Authenticode certificate details from signed Windows binaries using jsign extract + openssl. Co-authored-by: Isaac
1 parent 3c08a6c commit 487c272

1 file changed

Lines changed: 10 additions & 0 deletions

File tree

.github/workflows/release-test.yml

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,16 @@ jobs:
8181
env:
8282
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
8383

84+
- name: Verify Windows binary signatures
85+
run: |
86+
for exe in dist/windows_*/databricks.exe; do
87+
echo "=== $exe ==="
88+
java -jar "$JSIGN_JAR" extract --format PEM "$exe"
89+
openssl pkcs7 -in "${exe}.p7" -inform PEM -print_certs -text -noout
90+
rm "${exe}.p7"
91+
echo
92+
done
93+
8494
- name: Upload artifacts
8595
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
8696
with:

0 commit comments

Comments
 (0)