Skip to content

chore(windows): Azure Trusted Signing + fix low-res icon#29

Merged
exitzerolabs-admin merged 1 commit into
mainfrom
chore/windows-signing-and-icon
Mar 7, 2026
Merged

chore(windows): Azure Trusted Signing + fix low-res icon#29
exitzerolabs-admin merged 1 commit into
mainfrom
chore/windows-signing-and-icon

Conversation

@exitzerolabs-admin

Copy link
Copy Markdown
Contributor

Summary

  • Set up Azure Trusted Signing for Windows code signing in the release workflow
  • Rebuilt icon.ico with all standard sizes (16–256px); was a single 16x16 causing blurry icons everywhere on Windows

Details

  • Certificate profile: threatforge-public (PublicTrust) under threatforge-signing account, linked to validated "Exit Zero Labs LLC" identity
  • CI service principal: threatforge-signing-ci scoped to only sign with this profile
  • GitHub secrets: AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_CLIENT_SECRET
  • Signing flow: Release workflow installs the Trusted Signing dlib on windows-latest, passes --config src-tauri/tauri.signing.conf.json to Tauri which invokes scripts/sign-windows.ps1 for every binary

Files

File Purpose
src-tauri/trusted-signing-metadata.json Azure endpoint + account config (no secrets)
src-tauri/tauri.signing.conf.json Tauri config override with signCommand (CI only)
scripts/sign-windows.ps1 Signing script wrapping signtool + Azure dlib
.github/workflows/release.yml Install signing SDK, pass Azure auth env vars
src-tauri/icons/icon.ico Rebuilt with 7 sizes (was 1x 16px)

Test plan

  • Trigger a release build on Windows and verify the .exe and NSIS installer are Authenticode-signed
  • Verify the installed app shows a crisp icon in taskbar, Start menu, and Explorer

🤖 Generated with Claude Code

- Add Azure Trusted Signing to release workflow for Windows code signing
- Create signing script, metadata config, and Tauri signing config override
- Rebuild icon.ico with all standard sizes (16–256px) from 512px source;
  was a single 16x16 causing blurry icons in taskbar/Start menu/Explorer

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@vercel

vercel Bot commented Mar 7, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
threat-forge Ready Ready Preview, Comment Mar 7, 2026 0:54am

Request Review

@exitzerolabs-admin exitzerolabs-admin self-assigned this Mar 7, 2026
@exitzerolabs-admin
exitzerolabs-admin merged commit 49053f6 into main Mar 7, 2026
8 checks passed
@exitzerolabs-admin
exitzerolabs-admin deleted the chore/windows-signing-and-icon branch March 7, 2026 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant