Automatically Signing a Window... Note

Automatically Signing a Windows EXE with Azure Trusted Signing, dotnet sign, and GitHub Actions

The author of the text created a Windows Edge Light App and wanted to add a feature that would give it a virtual ring light, similar to the Mac Tahoe's Edge Light feature. To make the app more trustworthy, the author decided to use Azure Trusted Signing, a cloud-based code signing service provided by Microsoft. This service allows for automatic certificate management, GitHub Actions integration, and is trusted by Windows, which helps to prevent SmartScreen warnings. The author found that Azure Trusted Signing was less of a hassle than traditional code signing methods, but still required some setup and configuration. To use the service, the author had to register the resource provider, create a trusted signing account, complete identity validation, and create a certificate profile. The author then used the Azure CLI to assign the correct role and login with the correct scope, and installed the sign tool to sign the executable. The author also set up automated signing with GitHub Actions, which required creating a service principal with signing permissions. The process involved several steps, including verifying the setup and troubleshooting common issues. Overall, the author found that Azure Trusted Signing was a useful tool for adding trust to their app, but required some technical expertise to set up and configure. The author's experience with Azure Trusted Signing was mostly positive, but highlighted the need for careful attention to detail and troubleshooting to overcome common issues.
CdXz5zHNQW_skY9OmNcGf.png