chess 7c2ce90716 Sign the PowerShell installer in Windows releases (#51158) ...

## What changed

Extend the Windows signing action with an `additional-files` input and sign `scripts/install/install.ps1` with Azure Trusted Signing in the x64 release job. Stage the architecture-independent installer after compression so it remains a plain script, and publish the signed artifact as `install.ps1` instead of copying the unsigned source.

## Testing

The Windows release workflow verifies that the installer has a valid Authenticode signature and a timestamp certificate before staging it, failing the job if either check fails.

GitOrigin-RevId: 6f16a084b8f350fbf3644c36d75651a6f4b88506

2026-10-05 18:54:42 +00:00

..

build-codex-packages

Add a composite action to build and smoke-test Codex packages (#46551)

2026-09-19 01:15:08 +00:00

check-clean-worktree

ci: fail jobs that dirty the worktree (#29720)

2026-06-24 11:06:35 -07:00

linux-code-sign

ci: publish codex-app-server release artifacts (#19447)

2026-04-24 15:29:37 -07:00

prepare-bazel-ci

ci: share common workflow setup (#31318)

2026-07-06 17:27:44 -07:00

publish-dotslash

Run DotSlash publishing directly on Ubuntu runners (#45035)

2026-09-12 13:07:13 +00:00

run-argument-comment-lint

ci: share common workflow setup (#31318)

2026-07-06 17:27:44 -07:00

setup-akv-pkcs11-codesigning

ci: sign macOS release artifacts with Azure Key Vault (#26252)

2026-06-03 20:34:51 -07:00

setup-bazel-ci

ci: route build IO through Dev Drives (#31357)

2026-07-08 14:06:37 -07:00

setup-ci

Bump taiki-e/install-action to v2.87.21 in CI setup (#49316)

2026-09-29 16:58:22 +00:00

setup-msvc-env

Pass CI workflow inputs through environment variables (#39717)

2026-08-20 14:02:13 +00:00

setup-rusty-v8

Pin V8 release manifests and prevent published release replacement (#43444)

2026-09-07 11:55:57 +00:00

windows-code-sign

Sign the PowerShell installer in Windows releases (#51158)

2026-10-05 18:54:42 +00:00