Thank you to Dirk Lemstra and Dana Prajea.

This action signs files that are supported by signtool.exe with a code signing certificate that takes in a password. This action only works on Windows and that means it should run on windows-latest.

Required The base64 encoded certificate.

Required Certificate Password.

Required The folder that contains the files to sign.

Optional Recursively search for files.

Optional Url of the timestamp server. Default is 'http://timestamp.digicert.com'

runs-on: windows-latest
steps:
  uses: sproctor/code-sign-action@v1
  with:
    certificate: '${{ secrets.CERTIFICATE }}'
    password: '${{ secrets.PASSWORD }}'
    folder: 'files'
    recursive: true