Don't sign windows executables twice - electron does it

Author: galt-tr

.github/workflows/release.yml

@@ -192,39 +192,6 @@ jobs:
           npm run build
           npx electron-builder --win --publish never
 
-      - name: Verify DigiCert certificate access
-        if: matrix.platform == 'windows-2022'
-        shell: cmd
-        run: |
-          smctl keypair ls
-
-      - name: Sign Windows executables with DigiCert (KSP)
-        if: matrix.platform == 'windows-2022'
-        shell: cmd
-        run: |
-          for /r "release" %%f in (*.exe) do (
-            echo Signing %%f ...
-            smctl sign --fingerprint %SM_FINGERPRINT% --input "%%f" --verbose || (
-              echo Retry 1 for %%f ...
-              timeout /t 10 /nobreak >nul
-              smctl sign --fingerprint %SM_FINGERPRINT% --input "%%f" --verbose || (
-                echo Retry 2 for %%f ...
-                timeout /t 10 /nobreak >nul
-                smctl sign --fingerprint %SM_FINGERPRINT% --input "%%f" --verbose
-              )
-            )
-          )
-
-      - name: Add signtool to PATH
-        if: matrix.platform == 'windows-2022'
-        shell: pwsh
-        run: |
-          $signtool = Get-ChildItem "C:\Program Files (x86)\Windows Kits\10\bin\*\x64\signtool.exe" -ErrorAction SilentlyContinue | Sort-Object -Descending | Select-Object -First 1 -ExpandProperty FullName
-          if (-not $signtool) { throw "signtool.exe not found" }
-          $dir = Split-Path $signtool
-          Write-Host "Adding signtool dir to PATH: $dir"
-          echo $dir | Out-File -FilePath $env:GITHUB_PATH -Encoding utf8 -Append
-
       - name: Verify Windows Signatures
         if: matrix.platform == 'windows-2022'
         shell: pwsh