Add signature verification step

mondoohq · Oct 31, 2024 · ab9023d · ab9023d
1 parent 02a9288
commit ab9023d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/pkg_msi.yaml b/.github/workflows/pkg_msi.yaml
@@ -199,6 +199,13 @@ jobs:
         with:
           name: msi-${{ matrix.arch }}
           path: dist
+      - name: Verify signature is valid
+        run: |
+          curl --retry 10 --retry-delay 60 -X GET  https://one.digicert.com/signingmanager/api-ui/v1/releases/smtools-windows-x64.msi/download -H "x-api-key:%SM_API_KEY%" -o smtools-windows-x64.msi
+          msiexec /i smtools-windows-x64.msi /quiet /qn
+          
+          cd dist
+          signtool.exe verify /pa /hash SHA56 /all mondoo_${{ matrix.arch }}.msi
       - name: Install artifact
         run: |
           cd dist