I use a Azure Key Vault[1], and jsign[2] to do this. You can execute it on any platform that supports Java, so I have Linux builds cross compiling to windows w

I use a Azure Key Vault[1], and jsign[2] to do this. You can execute it on any platform that supports Java, so I have Linux builds cross compiling to windows with clang and then sign with jsign: https://github.com/BrowserWorks/Waterfox/blob/7eda3b998a56ad9cad19a388ff759a8d7d6f4b7d/.github/workflows/build.yml#L315 https://github.com/BrowserWorks/Waterfox/blob/7eda3b998a56ad... [1] https://trustzone.com/knowledge-base/purchasing-an-ev-code-signing-certificate-for-azure/ https://trustzone.com/knowledge-base/purchasing-an-ev-code-s... [2] https://trustzone.com/knowledge-base/purchasing-an-ev-code-signing-certificate-for-azure/ https://trustzone.com/knowledge-base/purchasing-an-ev-code-s...