From 6ed53e4e9de5dbc58b3f5e539939b140a3c359da Mon Sep 17 00:00:00 2001
From: Logan McNaughton <848146+loganmc10@users.noreply.github.com>
Date: Wed, 8 Apr 2026 05:09:32 -0600
Subject: [PATCH] Upload signed windows builds (#715)

* upload windows signed artifact

* more

* more

* more

* more
---
 .github/workflows/build.yml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d4dfffec..e3c159ac 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -117,10 +117,10 @@ jobs:
         with:
           name: gopher64-${{ matrix.arch }}
           path: output/gopher64-${{ matrix.arch }}.exe
-          archive: false
+          archive: ${{ github.ref_type == 'tag' && true || false }}
       - name: SignPath
         if: ${{ github.ref_type == 'tag' }}
-        uses: signpath/github-action-submit-signing-request@v2.0
+        uses: signpath/github-action-submit-signing-request@v2
         with:
           api-token: "${{ secrets.SIGNPATH_API_TOKEN }}"
           organization-id: "${{ secrets.SIGNPATH_ORG_ID }}"
@@ -128,7 +128,17 @@ jobs:
           artifact-configuration-slug: "gopher64-${{ matrix.arch }}"
           signing-policy-slug: "release-signing"
           github-artifact-id: "${{ steps.upload-unsigned-artifact.outputs.artifact-id }}"
-          wait-for-completion: false
+          wait-for-completion: true
+          wait-for-completion-timeout-in-seconds: 3600
+          output-artifact-directory: output-signed
+      - name: Upload signed artifact
+        if: ${{ github.ref_type == 'tag' }}
+        uses: actions/upload-artifact@v7
+        with:
+          name: gopher64-${{ matrix.arch }}
+          path: output-signed/gopher64-${{ matrix.arch }}.exe
+          archive: false
+          overwrite: true
 
   build-macos:
     runs-on: macos-26