From ce0229de38b6f9b8439cd482b83e930def4ca7b8 Mon Sep 17 00:00:00 2001
From: Integralist <integralist@fastly.com>
Date: Fri, 24 Mar 2023 14:12:47 +0000
Subject: [PATCH] feat(build): code-sign Windows binaries

---
 .goreleaser.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.goreleaser.yml b/.goreleaser.yml
index fc775e4f6..64877346a 100644
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -41,6 +41,10 @@ builds:
     id: windows
     goos: [windows]
     goarch: ["386", amd64, arm64]
+    hooks: # https://goreleaser.com/customization/builds/#build-hooks
+      post:
+        - osslsigncode sign -certs ./certkey/spc.pem -key ./certkey/private_key.pem -n "fastly-cli" -i "https://github.com/fastly/cli" -verbose -in "{{ .Path }}" -out "{{ .Path }}-signed"
+        - mv "{{ .Path }}-signed" "{{ .Path }}"
   - <<: *build_defaults
     env:
       - CGO_ENABLED=0