From a4d583bf2d797d11ef1eec04ea081aaa35fbcdb6 Mon Sep 17 00:00:00 2001
From: Evan Hu <e-hu@unext.jp>
Date: Sun, 6 Sep 2026 17:04:08 +0900
Subject: [PATCH] ci: sign uiAccess server and installer

---
 .github/workflows/release.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9d62be40..075ebe2e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -396,6 +396,16 @@ jobs:
           --windows-commit "$env:WINDOWS_COMMIT"
           --output installer/app_data/product-manifest.json
 
+      - name: Sign the uiAccess server
+        if: ${{ steps.signing.outputs.signing_enabled == 'true' }}
+        shell: pwsh
+        working-directory: installer
+        env:
+          CERTIFICATE_BASE64: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE_BASE64 }}
+          CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_SIGNING_CERTIFICATE_PASSWORD }}
+          TIMESTAMP_URL: ${{ vars.WINDOWS_SIGNING_TIMESTAMP_URL || 'http://timestamp.digicert.com' }}
+        run: ../scripts/ci/sign-binaries.ps1 -Path 'server_exe/MetasequoiaImeServer.exe'
+
       - name: Install the Chinese language file for Inno Setup
         shell: pwsh
         run: ./scripts/ci/install-inno-language.ps1