chore: Add signing in GHA

.github/workflows/main.yml

@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
 
 jobs:
-  release:
+  build-installer:
     runs-on: ${{ matrix.os }}
 
     strategy:
@@ -38,7 +38,9 @@ jobs:
 
           # If the commit is tagged with a version (e.g. "v1.0.0"),
           # release the app after building
-          release: true # ${{ startsWith(github.ref, 'refs/tags/v') }}
+          # release: true # ${{ startsWith(github.ref, 'refs/tags/v') }}
+
+          release: false
         env:
           in_github_action: "true"
 
@@ -50,9 +52,28 @@ jobs:
 
   sign-installer:
     name: Sign installer
-    if: startsWith(github.ref, 'refs/tags/v')
+    needs: build-installer
+    #if: startsWith(github.ref, 'refs/tags/v')
     uses: sillsdev/codesign/.github/workflows/[email protected]
     with:
       artifact: BloomPubViewerSetup
     secrets:
       certificate: ${{ secrets.CODESIGN_LSDEVSECTIGOEV }}
+
+  create-release:
+    name: Create Release
+    needs: sign-installer
+    runs-on: windows-latest
+
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: BloomPubViewerSetup
+
+      - name: Create Release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: "**/BloomPub*.exe"
+          body: |
+            Release for version ${{ github.ref }}
+          draft: true