security: 增强代码签名脚本安全选项

- 添加签名描述：WindowMsgBot - 添加签名URL：https://github.com/ypshidifu/windowmsgbot - 添加详细输出选项(/v) - 使用更安全的签名选项
2026-08-08 20:45:42 +08:00
parent 86edb4577d
commit 2ac422235b
1 changed files with 2 additions and 1 deletions
@@ -65,7 +65,8 @@ echo Using signtool: %SIGNTOOL%
 echo.

 echo 1. Signing exe...
-"%SIGNTOOL%" sign /f "%CERT_PFX%" /p "%CERT_PASS%" /tr http://timestamp.digicert.com /td sha256 /fd sha256 "%EXE_PATH%"
+REM 使用更安全的签名选项：指定描述、URL、时间戳服务器
+"%SIGNTOOL%" sign /f "%CERT_PFX%" /p "%CERT_PASS%" /d "WindowMsgBot" /du "https://github.com/ypshidifu/windowmsgbot" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /v "%EXE_PATH%"
 if %errorlevel% neq 0 (
    echo [ERROR] Signing failed!
    pause