Update Windows release signing action by chrisd8088 · Pull Request #6222 · git-lfs/git-lfs · GitHub
Skip to content

Update Windows release signing action - #6222

Merged
chrisd8088 merged 3 commits into
git-lfs:mainfrom
chrisd8088:update-windows-release-signing
Mar 31, 2026
Merged

chrisd8088 merged 3 commits into
git-lfs:mainfrom
chrisd8088:update-windows-release-signing

Conversation

@chrisd8088

Copy link
Copy Markdown
Member

The name of the azure/trusted-signing-action GitHub repository was recently changed to azure/artifact-signing-action in PR Azure/artifact-signing-action#108, so we update our GitHub Actions release workflow to use the new name in our build-windows job, as the job would otherwise fail.

We also rename one of the input parameters we pass to the Action, as the same PR Azure/artifact-signing-action#108 deprecated the parameter name trusted-signing-account-name in favour of the simpler term signing-account-name.

Finally, we update the value of the endpoint input parameter we pass to the Action, as our Windows Artifact Signing account and certificate profile have apparently moved to a new Azure region.

Note that this PR's changes were tested successfully in a private repository.

Many thanks to @divz44 and @padraignix for their help diagnosing the region change!

The name of the "azure/trusted-signing-action" GitHub repository
was recently changed to "azure/artifact-signing-action" in PR
Azure/artifact-signing-action#108, so we update our GitHub Actions
release workflow to use the new name in our "build-windows" job,
as the job would otherwise fail.

We also rename one of the input parameters we pass to the Action,
as the same PR Azure/artifact-signing-action#108 deprecated the
parameter name "trusted-signing-account-name" in favour of the
simpler term "signing-account-name".

Finally, we update the value of the "endpoint" input parameter we
pass to the Action, as our Windows Artifact Signing account and
certificate profile have apparently moved to a new Azure region.

h/t divz44 and padraignix for their help diagnosing the region change
@chrisd8088
chrisd8088 requested a review from a team as a code owner March 17, 2026 05:50
@chrisd8088 chrisd8088 added windows github_actions Pull requests that update GitHub Actions code labels Mar 17, 2026
Comment thread .github/workflows/release.yml
Comment thread .github/workflows/release.yml
In a prior commit in this PR we updated the value of the "endpoint"
input parameter we pass to the "azure/artifact-signing-action" Action
in the "build-windows" job of our GitHub Actions release workflow,
because our Windows Artifact Signing account and certificate profile
have apparently moved to a new Azure region.

As suggested by larsxschneider on PR review, we now also add comments
which describe the requirement that the "endpoint" parameter's value
match the Azure region where our account and profile reside.
@chrisd8088
chrisd8088 merged commit 9f4d059 into git-lfs:main Mar 31, 2026
10 checks passed
@chrisd8088
chrisd8088 deleted the update-windows-release-signing branch March 31, 2026 00:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code windows

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants