From 4a24ea37a232cdd91de7f9b831ffb90784f145a9 Mon Sep 17 00:00:00 2001
From: Nate Brown <nbrown.us@gmail.com>
Date: Fri, 8 May 2026 11:53:26 -0500
Subject: [PATCH] Remove test sign flow

---
 .github/workflows/code-sign-test.yml | 48 ----------------------------
 1 file changed, 48 deletions(-)
 delete mode 100644 .github/workflows/code-sign-test.yml

diff --git a/.github/workflows/code-sign-test.yml b/.github/workflows/code-sign-test.yml
deleted file mode 100644
index 42a28324..00000000
--- a/.github/workflows/code-sign-test.yml
+++ /dev/null
@@ -1,48 +0,0 @@
-name: Test Windows code-signing
-
-# Manual signing rehearsal: builds the Windows binaries, runs the code-sign
-# action against them, uploads the signed result. Use to validate the
-# signing path without cutting a release. Never runs automatically.
-
-on:
-  workflow_dispatch:
-
-jobs:
-  build-and-sign:
-    name: Build and sign
-    runs-on: windows-latest
-    permissions:
-      id-token: write
-      contents: read
-    steps:
-      - uses: actions/checkout@v6
-
-      - uses: actions/setup-go@v6
-        with:
-          go-version: '1.25'
-          check-latest: true
-
-      - name: Build
-        run: |
-          mkdir build\windows-amd64
-          $Env:GOARCH = "amd64"
-          go build -trimpath -ldflags "-X main.Build=codesign-test-${Env:GITHUB_SHA}" -o build\windows-amd64\nebula.exe ./cmd/nebula-service
-          go build -trimpath -ldflags "-X main.Build=codesign-test-${Env:GITHUB_SHA}" -o build\windows-amd64\nebula-cert.exe ./cmd/nebula-cert
-          mkdir build\windows-arm64
-          $Env:GOARCH = "arm64"
-          go build -trimpath -ldflags "-X main.Build=codesign-test-${Env:GITHUB_SHA}" -o build\windows-arm64\nebula.exe ./cmd/nebula-service
-          go build -trimpath -ldflags "-X main.Build=codesign-test-${Env:GITHUB_SHA}" -o build\windows-arm64\nebula-cert.exe ./cmd/nebula-cert
-
-      - name: Code-sign
-        uses: ./.github/actions/code-sign
-        with:
-          path: build
-          role: ${{ secrets.DEFINED_CODE_SIGNER_ROLE }}
-          bucket: ${{ secrets.DEFINED_CODE_SIGNER_BUCKET }}
-
-      - name: Upload signed artifact
-        uses: actions/upload-artifact@v7
-        with:
-          name: codesign-test
-          path: build
-          retention-days: 7