feat: コード署名を追加 (#9)

Co-authored-by: Lars Scheibling <24367830+scheibling@users.noreply.github.com>
Co-authored-by: scheibling <lars@scheibling.se>

Author: sevenc-nanashi

.github/workflows/build-production.yml

@@ -55,32 +55,30 @@ jobs:
           path: dist
 
   build-electron:
+    environment: OSSign
     strategy:
       fail-fast: false
       matrix:
         name:
           - windows
-          - mac-x64
-          - mac-arm64
-          - linux
+#          - mac-x64
+#          - mac-arm64
+#          - linux
         include:
           - os: windows-latest
             path: dist-electron/*.exe
             build-args: ""
             name: windows
-          - os: macos-latest
-            path: dist-electron/*.dmg
-            build-args: "--x64"
-            name: mac-x64
-            ext: x64
-          - os: macos-latest
-            path: dist-electron/*.dmg
-            build-args: "--arm64"
-            name: mac-arm64
-          - os: ubuntu-latest
-            path: dist-electron/*.AppImage
-            build-args: ""
-            name: linux
+#          - os: macos-latest
+#            path: dist-electron/*.dmg
+#            build-args: "--x64"
+#            name: mac-x64
+#            ext: x64
+#          - os: macos-latest
+#            path: dist-electron/*.dmg
+#            build-args: "--arm64"
+#            name: mac-arm64
+
 
     runs-on: ${{ matrix.os }}
     needs:
@@ -122,7 +120,15 @@ jobs:
           node update-version.js $VERSION
           echo Version: $VERSION
 
+      - name: Install OSSign
+        uses: ossign/actions/setup-ossign@main
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          ossignConfig: ""
+
       - name: Build electron
+        env:
+          OSSIGN_CONFIG: ${{ secrets.OSSIGN_CONFIG }}
         run: |
           # TODO: https://github.com/electron-userland/electron-builder/issues/6933 が直ったら修正
           # pnpm build:electron ${{ matrix.build-args }}
@@ -145,6 +151,10 @@ jobs:
   release:
     name: Upload release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
     needs:
       - build-electron
 

README.md

@@ -1,5 +1,6 @@
 # Kiite Cafe Desktop
-[![GitHub release](https://img.shields.io/github/v/release/sevenc-nanashi/kiitecafe-desktop?label=Release)](https://github.com/sevenc-nanashi/kiitecafe-desktop/releases/latest)  
+
+[![GitHub release](https://img.shields.io/github/v/release/sevenc-nanashi/kiitecafe-desktop?label=Release)](https://github.com/sevenc-nanashi/kiitecafe-desktop/releases/latest)
 
 Kiite Cafeのデスクトップアプリ版です。
 
@@ -15,7 +16,10 @@ Kiite Cafeのデスクトップアプリ版です。
 - 動画フリーズ（動画だけ止まった状態）時の自動復帰
 - UIカスタマイズ
 
+## 謝辞
+
+Windows版では[OSSign](https://ossign.org)による署名を使用しています。
+
 ## ライセンス
 
 GPLv3でライセンスされています。
-

electron-builder.config.cjs

@@ -1,3 +1,6 @@
+/* eslint-disable @typescript-eslint/no-require-imports */
+
+const { ossign } = require("@ossign/electronbuilder");
 /**
  * @type {import('electron-builder').Configuration}
  */
@@ -18,6 +21,7 @@ module.exports = {
   win: {
     target: ["nsis", "portable"],
     icon: "public/icon.ico",
+    sign: process.env.OSSIGN_CONFIG ? ossign : undefined,
   },
   nsis: {
     oneClick: false,

package.json

@@ -42,6 +42,7 @@
     "@types/discord-rpc": "^4.0.9",
     "@types/semver": "^7.5.8",
     "@typescript-eslint/parser": "^8.27.0",
+    "@ossign/electronbuilder": "^1.0.1",  
     "@vitejs/plugin-vue": "^5.2.3",
     "@vue/eslint-config-typescript": "^14.5.0",
     "electron": "^35.0.3",