From bc4d4ca687dc6132aea79c9cf6ea3da40b5b27c8 Mon Sep 17 00:00:00 2001
From: Kaloyan Manolov <kmanolov@asteasolutions.com>
Date: Wed, 30 Apr 2025 13:56:58 +0300
Subject: [PATCH] fix: only sign macos builds

---
 .github/workflows/ci-cd.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 608695b..2c0f435 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -23,7 +23,9 @@ jobs:
       run:
         shell: bash
     env:
-        SCRATCH_SHOULD_SIGN: ${{ github.ref_name == 'develop' }}
+        # This is a temporary workaround. We're currently having issues signing windows builds
+        # due to a change of the security policy (see https://github.com/electron/windows-installer/issues/473)
+        SCRATCH_SHOULD_SIGN: ${{ github.ref_name == 'develop' && matrix.os != 'windows-latest' }}
         AC_USERNAME: ${{ (github.ref_name == 'develop' && secrets.AC_USERNAME) || '' }}
         AC_PASSWORD: ${{ (github.ref_name == 'develop' && secrets.AC_PASSWORD) || '' }}
     steps: