build: wire up winsparkle envs

Author: dumbmoron

.github/workflows/main.yml

@@ -19,6 +19,10 @@ on:
         description: 'Create a release after build is done'
         default: false
 
+env:
+  WINSPARKLE_ED_KEY: ${{ vars.WINSPARKLE_ED_KEY }}
+  WINSPARKLE_AUTHENTICODE_ORG: ${{ vars.WINSPARKLE_AUTHENTICODE_ORG }}
+
 jobs:
   build-1:
     runs-on: ${{ github.event.inputs.runner }}

.github/workflows/main.yml.j2

@@ -17,6 +17,10 @@ on:
         description: 'Create a release after build is done'
         default: false
 
+env:
+  WINSPARKLE_ED_KEY: {% raw %}${{ vars.WINSPARKLE_ED_KEY }}{% endraw %}
+  WINSPARKLE_AUTHENTICODE_ORG: {% raw %}${{ vars.WINSPARKLE_AUTHENTICODE_ORG }}{% endraw %}
+
 jobs:
 {%- for arch in ["", "arm"] %}
 {%- set prefix = "build"    ~ ('-arm' if arch == 'arm' else '') %}

build.py

@@ -328,6 +328,13 @@ def main():
         else:
             gn_flags += 'is_official_build=true\n'
 
+        winsparkle_ed_key = os.environ.get('WINSPARKLE_ED_KEY', '')
+        authenticode_org = os.environ.get('WINSPARKLE_AUTHENTICODE_ORG', '')
+        if winsparkle_ed_key and authenticode_org:
+            gn_flags += 'enable_winsparkle=true\n'
+            gn_flags += f'winsparkle_ed_key="{winsparkle_ed_key}"\n'
+            gn_flags += f'winsparkle_authenticode_org="{authenticode_org}"\n'
+
         (source_tree / 'out/Default/args.gn').write_text(gn_flags, encoding=ENCODING)
 
     # Enter source tree to run build commands