Add publisher

> no certificates with ExtKeyUsageCodeSigning
  Cannot extract publisher name from code signing certificate. As workaround, set win.publisherName.

desktop/.github/workflows/desktop-release.yml

@@ -54,8 +54,16 @@ jobs:
               # https://github.com/electron-userland/electron-builder/issues/4181
               run: sudo apt-get install libarchive-tools
 
-            - name: Build
+            - name: Export Windows code signing certificate
+              if: startsWith(matrix.os, 'windows')
+              run: echo "$CSC_LINK_PFX_B64" | base64 -d > windows-csc.pfx
+              shell: bash
+              env:
+                  CSC_LINK_PFX_B64: ${{ secrets.WINDOWS_CSC_LINK_PFX_B64 }}
+
+            - name: Build Linux
               uses: ente-io/action-electron-builder@v1.0.0
+              if: startsWith(matrix.os, 'ubuntu')
               with:
                   package_root: desktop
                   build_script_name: build:ci
@@ -68,6 +76,19 @@ jobs:
                   # create a (draft) release after building. Otherwise upload
                   # assets to the existing draft named after the version.
                   release: ${{ startsWith(github.ref, 'refs/tags/v') }}
+              env:
+                  # Workaround recommended in
+                  # https://github.com/electron-userland/electron-builder/issues/3179
+                  USE_HARD_LINKS: false
+
+            - name: Build macOS
+              uses: ente-io/action-electron-builder@v1.0.0
+              if: startsWith(matrix.os, 'macos')
+              with:
+                  package_root: desktop
+                  build_script_name: build:ci
+                  github_token: ${{ secrets.GITHUB_TOKEN }}
+                  release: ${{ startsWith(github.ref, 'refs/tags/v') }}
 
                   mac_certs: ${{ secrets.MAC_CERTS }}
                   mac_certs_password: ${{ secrets.MAC_CERTS_PASSWORD }}
@@ -78,3 +99,18 @@ jobs:
                       ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
                   APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
                   USE_HARD_LINKS: false
+
+            - name: Build Windows
+              uses: ente-io/action-electron-builder@v1.0.0
+              if: startsWith(matrix.os, 'windows')
+              with:
+                  package_root: desktop
+                  build_script_name: build:ci
+                  github_token: ${{ secrets.GITHUB_TOKEN }}
+                  release: ${{ startsWith(github.ref, 'refs/tags/v') }}
+              env:
+                  # Windows signing credentials
+                  # https://www.electron.build/code-signing
+                  CSC_LINK: "windows-csc.pfx"
+                  CSC_KEY_PASSWORD: ${{ secrets.WINDOWS_CSC_KEY_PASSWORD }}
+                  USE_HARD_LINKS: false

desktop/electron-builder.yml

@@ -7,6 +7,8 @@ extraFiles:
     - from: build
       to: resources
 win:
+    # prettier-ignore
+    publisherName: "C=US, ST=Delaware, L=Dover, O=Ente Technologies, Inc., CN=Ente, emailAddress=code@ente.io"
     target:
         - target: nsis
           arch: [x64, arm64]