build(ssh): verify Windows runtime signatures

Co-authored-by: Orca <help@stably.ai>
This commit is contained in:
Jinwoo-H
2026-07-14 23:53:56 -04:00
co-authored by Orca
parent 0efd19c9c3
commit 072c0d434e
4 changed files with 599 additions and 0 deletions
@@ -139,6 +139,8 @@ jobs:
node --check config/scripts/ssh-relay-runtime-native-signing-apply.test.mjs
node --check config/scripts/ssh-relay-runtime-macos-signature-verification.mjs
node --check config/scripts/ssh-relay-runtime-macos-signature-verification.test.mjs
node --check config/scripts/ssh-relay-runtime-windows-signature-verification.mjs
node --check config/scripts/ssh-relay-runtime-windows-signature-verification.test.mjs
pnpm exec vitest run --config config/vitest.config.ts \
config/scripts/ssh-relay-node-release-verification.test.mjs \
config/scripts/ssh-relay-node-tar-inspection.test.mjs \
@@ -158,6 +160,7 @@ jobs:
config/scripts/ssh-relay-runtime-native-signing-stage.test.mjs \
config/scripts/ssh-relay-runtime-native-signing-apply.test.mjs \
config/scripts/ssh-relay-runtime-macos-signature-verification.test.mjs \
config/scripts/ssh-relay-runtime-windows-signature-verification.test.mjs \
config/scripts/ssh-relay-runtime-closure.test.mjs \
config/scripts/ssh-relay-runtime-pty-smoke.test.mjs \
config/scripts/ssh-relay-runtime-reproducibility.test.mjs \
@@ -465,6 +468,10 @@ jobs:
if ($LASTEXITCODE -ne 0) { throw 'runtime macOS signature verification script syntax check failed' }
node --check config/scripts/ssh-relay-runtime-macos-signature-verification.test.mjs
if ($LASTEXITCODE -ne 0) { throw 'runtime macOS signature verification test syntax check failed' }
node --check config/scripts/ssh-relay-runtime-windows-signature-verification.mjs
if ($LASTEXITCODE -ne 0) { throw 'runtime Windows signature verification script syntax check failed' }
node --check config/scripts/ssh-relay-runtime-windows-signature-verification.test.mjs
if ($LASTEXITCODE -ne 0) { throw 'runtime Windows signature verification test syntax check failed' }
pnpm exec vitest run --config config/vitest.config.ts `
config/scripts/ssh-relay-node-release-verification.test.mjs `
config/scripts/ssh-relay-node-tar-inspection.test.mjs `
@@ -484,6 +491,7 @@ jobs:
config/scripts/ssh-relay-runtime-native-signing-stage.test.mjs `
config/scripts/ssh-relay-runtime-native-signing-apply.test.mjs `
config/scripts/ssh-relay-runtime-macos-signature-verification.test.mjs `
config/scripts/ssh-relay-runtime-windows-signature-verification.test.mjs `
config/scripts/ssh-relay-runtime-closure.test.mjs `
config/scripts/ssh-relay-runtime-pty-smoke.test.mjs `
config/scripts/ssh-relay-runtime-reproducibility.test.mjs `