@thor Regarding Windows code signing discussed in office hours, Fleet has a reusable GitHub workflow to sign using Digicert-hosted HSM (Keylocker): https://github.com/fleetdm/fleet/blob/main/.github/workflows/code-sign-windows.yml

Nice, this'll be super helpful. Still trying to get the organization verification bits completed through Digicert, but hopefully once that's done we should be able to just re-use your workflow to get this stood up.