Have OpenCOR digitally signed

.github/workflows/cd.yml

@@ -17,15 +17,40 @@ jobs:
         include:
           - name: Windows
             os: windows-latest
-          - name: Linux
-            os: ubuntu-latest
-          - name: macOS (Intel)
-            os: macos-13
-          - name: macOS (ARM)
-            os: macos-latest
+          # - name: Linux
+          #   os: ubuntu-latest
+          # - name: macOS (Intel)
+          #   os: macos-13
+          # - name: macOS (ARM)
+          #   os: macos-latest
+    env:
+      EV_CERTIFICATE_BASE64: ${{ secrets.EV_CERTIFICATE_BASE64 }}
     steps:
+      - name: Set the timezone to New Zealand
+        uses: szenius/set-timezone@v2.0
+        with:
+          timezoneWindows: 'New Zealand Standard Time'
+          timezoneLinux: 'Pacific/Auckland'
+          timezoneMacos: 'Pacific/Auckland'
       - name: Check out OpenCOR
         uses: actions/checkout@v4
+      - name: Retrieve the EV certificate (Windows only)
+        if: matrix.name == 'Windows'
+        shell: bash
+        run: echo -n $EV_CERTIFICATE_BASE64 | base64 -d - >  EVCertificate.pfx
+      - name: Make sure that the EV certificate is available (Windows only)
+        if: matrix.name == 'Windows'
+        run: dir
+      - name: Copy EV_CERTIFICATE_BASE64 to EVCertificate.pfx (Windows only)
+        if: matrix.name == 'Windows'
+        shell: bash
+        run: echo $EV_CERTIFICATE_BASE64 > EVCertificate.pfx
+      - name: Output EV_CERTIFICATE_BASE64
+        shell: bash
+        run: echo $EV_CERTIFICATE_BASE64
+      - name: Make sure that the EV certificate is available (Windows only)
+        if: matrix.name == 'Windows'
+        run: dir
       - name: Install Node.js
         uses: actions/setup-node@v4
         with:

electron-builder.yml

@@ -3,7 +3,7 @@ productName: OpenCOR
 win:
   artifactName: ${productName}-${version}-Windows.${ext}
   target:
-    - nsis
+    # - nsis
     - zip
 nsis:
   uninstallDisplayName: ${productName}
@@ -16,6 +16,10 @@ linux:
     - deb
     - tar.gz
 mac:
+  # For notarisation to work, we must specify the following environment variables:
+  #  - APPLE_ID (the email used to login to https://account.apple.com/);
+  #  - APPLE_APP_SPECIFIC_PASSWORD (generated using the App-Specific Passwords tool at https://account.apple.com/account/manage); and
+  #  - APPLE_TEAM_ID (it can be retrieved from https://developer.apple.com/account/resources/certificates/list; see top right).
   artifactName: ${productName}-${version}-macOS-${arch}.${ext}
   target:
     - dmg