From f9f03c79ea130a3d173860f546b003e8e1f58a27 Mon Sep 17 00:00:00 2001 From: Laurent Trinques Date: Fri, 24 Jul 2026 10:20:01 +0200 Subject: [PATCH] Skip signing the Qt6 MSI, and guard against triggering a signing request from a fork (no SignPath secrets there). cf. DieterMayerOSS:fix/msi-signing-fork-guard (d3f60c88) --- .github/workflows/windows-msi.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/windows-msi.yml b/.github/workflows/windows-msi.yml index 881658d7d..ee31653be 100644 --- a/.github/workflows/windows-msi.yml +++ b/.github/workflows/windows-msi.yml @@ -289,7 +289,12 @@ jobs: retention-days: 1 if-no-files-found: error + # Qt6 stays on the unsigned/experimental track (no signing request for + # this flavor), and forks never have the SignPath secrets, so guard on + # both: only qt5, and only in the upstream repo. + # (cf. DieterMayerOSS:fix/msi-signing-fork-guard, d3f60c88) - name: Sign MSI via SignPath + if: matrix.flavor == 'qt5' && github.repository == 'qelectrotech/qelectrotech-source-mirror' uses: signpath/github-action-submit-signing-request@v2 with: api-token: ${{ secrets.SIGNPATH_API_TOKEN }}