mirror of
https://github.com/Kong/insomnia.git
synced 2026-11-05 04:23:55 -05:00
Squirrel signs the app exe again in package:windows:dist, but the release workflow already signed the secure wrapper Insomnia.exe. That costs one more code-signing token per run. When SKIP_SIGN_PREPACKAGED_APP_EXE=true (set only in the dist step), electron-builder's own signExts option excludes win-unpacked\Insomnia.exe from signing. All other files (stub, elevate.exe, uninstaller, installers, Squirrel.exe) are still signed. customSign.js is not changed. If the pattern does not match, the file is signed one extra time, so no unsigned file can ship. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>