actions: signtool /pa to trust broader set of CAs

GAM-team · Sep 24, 2024 · f7c13a3 · f7c13a3
1 parent c0470c3
commit f7c13a3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -661,7 +661,7 @@ jobs:
           # remove unsigned gam.exe and rename signed-gam.exe
           rm -v -f "${gampath}/gam.exe"
           mv -v -f "${gampath}/signed-gam.exe" "${gampath}/gam.exe"
-          "/c/Program Files (x86)/Windows Kits/10/bin/10.0.22621.0/x64/signtool.exe" verify /v "$gam"
+          "/c/Program Files (x86)/Windows Kits/10/bin/10.0.22621.0/x64/signtool.exe" verify /v /pa "$gam"
 
       - name: Attest gam executable was generated from this Action
         uses: actions/attest-build-provenance@v1