Extract trusted signing certificate

Author: jozefizso

.github/workflows/release.yml

@@ -151,6 +151,12 @@ jobs:
       env:
         NUGET_TOKEN: ${{ secrets.NUGET_TOKEN }}
 
+    - name: Extract trusted signing certificate
+      if: success() && steps.build.outputs.sign_binaries == 'true' && steps.build.outputs.publish_nuget == 'true'
+      run: |
+        $nupkg = Get-ChildItem -Path '${{ github.workspace}}\dist' -Filter '*.nupkg' | Select-Object -First 1
+        nuget-cert-extractor --file $nupkg --output '${{ github.workspace}}\dist' --code-signing --author --leaf
+
     - name: Archive NetOffice packages
       if: success() && matrix.configuration == 'Release'
       uses: actions/upload-artifact@v5