From 8c2bd0e447c63399ffda0107e93ac40b87672053 Mon Sep 17 00:00:00 2001
From: Hugo Montero <hugo.montero.ventura@particle.io>
Date: Thu, 28 Nov 2024 12:12:18 -0600
Subject: [PATCH] generate installler and sign it

---
 .github/workflows/reusable-build-2.yml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/.github/workflows/reusable-build-2.yml b/.github/workflows/reusable-build-2.yml
index 8ac850dca..5acb8c65e 100644
--- a/.github/workflows/reusable-build-2.yml
+++ b/.github/workflows/reusable-build-2.yml
@@ -85,6 +85,9 @@ jobs:
     runs-on: windows-latest
     needs: build
     steps:
+      - uses: actions/checkout@v3
+      - name: Install NSIS
+        run: choco install nsis -y
       - name: Download Artifact
         uses: actions/download-artifact@v4
         with:
@@ -103,6 +106,27 @@ jobs:
           # Sign all exes inside the folder
           files-folder: build
           files-folder-filter: exe
+
+      - name: Generate Windows Installer
+        run: makensis.exe installer\windows\ParticleCLISetup.nsi
+
+      - name: Move Installer to Build Folder
+        run: move installer\windows\ParticleCLISetup.exe build\ParticleCLISetup.exe
+
+      - name: Sign Windows Installer
+        uses: azure/trusted-signing-action@v0.5.0
+        with:
+          azure-tenant-id: ${{ secrets.AZURE_TENANT_ID }}
+          azure-client-id: ${{ secrets.AZURE_CLIENT_ID }}
+          azure-client-secret: ${{ secrets.AZURE_CLIENT_SECRET }}
+          endpoint: ${{ secrets.AZURE_ENDPOINT }}
+          trusted-signing-account-name: ${{ secrets.AZURE_CODE_SIGNING_NAME }}
+          certificate-profile-name: ${{ secrets.AZURE_CERT_PROFILE_NAME }}
+
+          # Sign all exes inside the folder
+          files-folder: build
+          files-folder-filter: exe
+
       - name: Upload Artifact
         uses: actions/upload-artifact@v4
         with: