Check for unsigned dlls

Author: fdennis

.github/workflows/windows.yml

@@ -218,4 +218,25 @@ jobs:
       uses: actions/upload-artifact@v4
       with:
         name: signed-files-and-msi
-        path: ykman-builds-windows/ykman-installer-windows
+        path: ykman-builds-windows/ykman-installer-windows
+
+  verify-signatures:
+    needs: [sign-msi]
+    runs-on: windows-latest
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v5
+        with:
+          name: signed-files-and-msi
+          path: ykman-builds-windows/ykman-installer-windows
+
+      - name: ls
+        run: ls
+
+      - name: ls
+        run: ls ykman-builds-windows\ykman-installer-windows
+
+      - name: Check for unsigned DLLs
+        shell: pwsh
+        working-directory: .\ykman-builds-windows\ykman-installer-windows
+        run: .\scripts\verify_dll.ps1

resources/win/verify_dll.ps1

@@ -0,0 +1,11 @@
+$unsignedDlls = Get-ChildItem -Path "ykman" -Recurse -Filter *.dll | 
+  Where-Object { (Get-AuthenticodeSignature $_.FullName).Status -ne 'Valid' } | 
+  Select-Object -ExpandProperty FullName
+
+if ($unsignedDlls) {
+    Write-Host "ERROR: Found unsigned or invalidly signed DLL(s):"
+    $unsignedDlls | ForEach-Object { Write-Host "  - $_" }
+    exit 1
+} else {
+    Write-Host "SUCCESS: All DLLs are properly signed."
+}