Add environment-gated release publishing and signing by mamoreau-devolutions · Pull Request #4 · Devolutions/pinget

Marc-André Moreau (mamoreau-devolutions) · 2026-04-27T17:19:52Z

Summary

Add publish-test / publish-prod environment selection to the Release workflow via github-env.
Gate package/signing and publishing jobs on the selected GitHub environment.
Sign Windows Rust release artifacts before upload.
Sign C# NuGet and PowerShell module binaries, including bundled module dependencies, before packaging/upload.
Switch NuGet publishing to NuGet/login@v1 OIDC and use PSGALLERY_NUGET_API_KEY for PowerShell Gallery publishing.

Triggered a dry run with test signing: https://github.com/Devolutions/pinget/actions/runs/25006418987
Downloaded and expanded artifacts from the dry run.
Verified all 19 .exe / .dll files in the uploaded artifacts report Authenticode Valid.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Marc-André Moreau (mamoreau-devolutions) and others added 3 commits April 27, 2026 11:39

Add environment-gated publishing workflow

1d2d364

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Sign Windows Rust release artifacts

3617c89

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Sign packaged PowerShell dependencies

ccd6d7a

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Marc-André Moreau (mamoreau-devolutions) requested a review from a team as a code owner April 27, 2026 17:19

Marc-André Moreau (mamoreau-devolutions) merged commit 0796652 into master Apr 27, 2026
16 checks passed

Marc-André Moreau (mamoreau-devolutions) deleted the mamoreau-devolutions/publish-workflows branch April 27, 2026 17:28