From b6537b8f5edab2a66c4b90196b29f6b35054551d Mon Sep 17 00:00:00 2001 From: Jeremy Daer Date: Thu, 20 Aug 2026 01:54:29 -0700 Subject: [PATCH] Add hey-cli Windows signing secrets to the release env manifest hey-cli is adopting the same DigiCert KeyLocker Authenticode pipeline, so its release environment needs the three SM_* secrets from the shared DigiCert CodeSigning Cert item. Its app token step has also moved from the deprecated app-id input to client-id, so the var to migrate is RELEASE_CLIENT_ID, matching the other CLIs. --- scripts/manage-release-env.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/scripts/manage-release-env.sh b/scripts/manage-release-env.sh index 6e28a86d..6befe766 100755 --- a/scripts/manage-release-env.sh +++ b/scripts/manage-release-env.sh @@ -44,6 +44,9 @@ SECRETS_MANIFEST=( "basecamp/hey-cli|MACOS_NOTARY_KEY_ID|macOS Notarization/key-id" "basecamp/hey-cli|MACOS_NOTARY_ISSUER_ID|macOS Notarization/issuer-id" "basecamp/hey-cli|AUR_KEY|AUR SSH Key/private-key" + "basecamp/hey-cli|SM_API_KEY|DigiCert CodeSigning Cert/SM_API_KEY" + "basecamp/hey-cli|SM_CLIENT_CERT_FILE_B64|DigiCert CodeSigning Cert/SM_CLIENT_CERT_FILE_B64" + "basecamp/hey-cli|SM_CLIENT_CERT_PASSWORD|DigiCert CodeSigning Cert/SM_CLIENT_CERT_PASSWORD" "basecamp/fizzy-cli|RELEASE_APP_PRIVATE_KEY|Release GitHub App/private-key" "basecamp/fizzy-cli|MACOS_SIGN_P12|macOS Code Signing/p12-base64" "basecamp/fizzy-cli|MACOS_SIGN_PASSWORD|macOS Code Signing/password" @@ -57,7 +60,7 @@ SECRETS_MANIFEST=( # Vars to migrate per repo (repo|var_name) VARS_MANIFEST=( "basecamp/basecamp-cli|RELEASE_CLIENT_ID" - "basecamp/hey-cli|RELEASE_APP_ID" + "basecamp/hey-cli|RELEASE_CLIENT_ID" "basecamp/fizzy-cli|RELEASE_CLIENT_ID" "basecamp/cli|SKILLS_APP_ID" )