[eric] win: sign the bundled claude.exe (AV-quarantine class) + require-signed gate + post-sign smoke

This commit is contained in:
ciregenz
2026-07-28 15:49:59 -07:00
parent ac0f575d34
commit bf49c2c528
2 changed files with 27 additions and 0 deletions
+3
View File
@@ -172,6 +172,9 @@ jobs:
run: |
node scripts/ci/verify-signature.js --require-signed --target electron/dist/win-unpacked/OpenSwarm.exe
if ($LASTEXITCODE -ne 0) { throw "inner OpenSwarm.exe is not validly signed" }
# The bundled Claude CLI must ship signed too: AV quarantine of the unsigned Bun exe is the field's "Claude Code not found" permanent-death class.
node scripts/ci/verify-signature.js --require-signed --target electron/dist/win-unpacked/resources/python-env/Lib/site-packages/claude_agent_sdk/_bundled/claude.exe
if ($LASTEXITCODE -ne 0) { throw "bundled claude.exe is not validly signed" }
# Squirrel writes Setup.exe into dist\squirrel-windows\, not dist\ root.
node scripts/ci/verify-signature.js --require-signed --target electron/dist/squirrel-windows/OpenSwarm-Setup-x64.exe
if ($LASTEXITCODE -ne 0) { throw "OpenSwarm-Setup-x64.exe (installer) is not validly signed" }