From 73854a141f35c13795a66f998029bf372cef7696 Mon Sep 17 00:00:00 2001 From: Aric Camarata Date: Tue, 1 Sep 2026 09:54:09 -0400 Subject: [PATCH] ci(masking): cross-link EXTERNAL-GATES.md Windows signing row (P6-E11-W2-S3-T15) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit desktop-windows.yml no longer has an if:false stub (already replaced with a real SSL_COM_USERNAME-conditional EV signing step) — just adding the same gate-register cross-link applied to clawde/macos-notarize.yml's Apple row. --- .github/workflows/desktop-windows.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/desktop-windows.yml b/.github/workflows/desktop-windows.yml index 84adcb5..2e28659 100644 --- a/.github/workflows/desktop-windows.yml +++ b/.github/workflows/desktop-windows.yml @@ -4,6 +4,7 @@ name: Desktop Windows Build # EV signing is conditional: only runs if SSL_COM_USERNAME secret is set. # Without EV cert, MSI ships unsigned — SmartScreen warns until reputation builds. # Reference: E-desktop-tauri.md PROC-2 for EV cert procurement details. +# Gate: EXTERNAL-GATES.md row "Windows EV/OV code-signing cert (~$300)" (currently OPEN) on: # Called by desktop-release.yml for tagged releases. Without workflow_call the