From 4d2deb109891b37f9d6e065a6e0a5eaeebad16fc Mon Sep 17 00:00:00 2001 From: iceweasel-oai Date: Fri, 12 Dec 2025 13:33:42 -0800 Subject: [PATCH] Sign two additional exes for Windows (#7942) The elevated sandbox ships two exes * one for elevated setup of the sandbox * one to actually run commands under the sandbox user. This PR adds them to the windows signing step --- .github/actions/windows-code-sign/action.yml | 2 ++ .github/workflows/rust-release.yml | 7 ++++++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/actions/windows-code-sign/action.yml b/.github/actions/windows-code-sign/action.yml index 2be64efc98..f6cf737912 100644 --- a/.github/actions/windows-code-sign/action.yml +++ b/.github/actions/windows-code-sign/action.yml @@ -53,3 +53,5 @@ runs: files: | ${{ github.workspace }}/codex-rs/target/${{ inputs.target }}/release/codex.exe ${{ github.workspace }}/codex-rs/target/${{ inputs.target }}/release/codex-responses-api-proxy.exe + ${{ github.workspace }}/codex-rs/target/${{ inputs.target }}/release/codex-windows-sandbox-setup.exe + ${{ github.workspace }}/codex-rs/target/${{ inputs.target }}/release/codex-command-runner.exe diff --git a/.github/workflows/rust-release.yml b/.github/workflows/rust-release.yml index b90f0027fa..6a2ea357e4 100644 --- a/.github/workflows/rust-release.yml +++ b/.github/workflows/rust-release.yml @@ -101,7 +101,12 @@ jobs: sudo apt-get install -y musl-tools pkg-config - name: Cargo build - run: cargo build --target ${{ matrix.target }} --release --bin codex --bin codex-responses-api-proxy + run: | + if [[ "${{ contains(matrix.target, 'windows') }}" == 'true' ]]; then + cargo build --target ${{ matrix.target }} --release --bin codex --bin codex-responses-api-proxy --bin codex-windows-sandbox-setup --bin codex-command-runner + else + cargo build --target ${{ matrix.target }} --release --bin codex --bin codex-responses-api-proxy + fi - if: ${{ contains(matrix.target, 'linux') }} name: Cosign Linux artifacts