chore(ci): sign using package (#678)

Author: mabaasit

.github/workflows/actions/test-and-build/action.yaml

@@ -89,13 +89,18 @@ runs:
     - name: Sign .vsix
       if: runner.os == 'Linux'
       env:
-        ARTIFACTORY_HOST: ${{ inputs.ARTIFACTORY_HOST }}
         ARTIFACTORY_PASSWORD: ${{ inputs.ARTIFACTORY_PASSWORD }}
         ARTIFACTORY_USERNAME: ${{ inputs.ARTIFACTORY_USERNAME }}
         GARASIGN_PASSWORD: ${{ inputs.GARASIGN_PASSWORD }}
         GARASIGN_USERNAME: ${{ inputs.GARASIGN_USERNAME }}
       run: |
-        bash scripts/sign-vsix.sh
+        set -e
+        FILE_TO_SIGN=$(find . -maxdepth 1 -name '*.vsix' -print -quit)
+        if [ -z "$FILE_TO_SIGN" ]; then
+          echo "Error: No .vsix file found in the current directory." >&2
+          exit 1
+        fi
+        node scripts/sign-vsix.js "${FILE_TO_SIGN}"
         ls *.vsix.sig
       shell: bash
 

package-lock.json

@@ -1117,6 +1117,7 @@
     "@mongodb-js/oidc-plugin": "^0.3.0",
     "@mongodb-js/prettier-config-devtools": "^1.0.1",
     "@mongodb-js/sbom-tools": "^0.5.4",
+    "@mongodb-js/signing-utils": "^0.3.1",
     "@mongosh/service-provider-core": "^2.0.2",
     "@testing-library/react": "^12.1.5",
     "@types/babel__core": "^7.20.1",

package.json

@@ -0,0 +1,13 @@
+const { sign } = require('@mongodb-js/signing-utils');
+
+(async () => {
+  const file = process.argv[2];
+  if (!file) {
+    throw new Error('File is required.');
+  }
+  console.log(`Signing vsix: ${file}`);
+  await sign(file, {
+    client: 'local',
+    signingMethod: 'gpg',
+  });
+})();