Fix path of the certificate

Author: bruno-at-orange

.github/workflows/pack-pip.yaml

@@ -68,21 +68,31 @@ jobs:
           uv sync --python .test-env --group dev --no-install-project
           uv run --python .test-env pytest tests/ --no-cov
 
+      # Non-Windows wheels uploaded directly (no signing)
+      - uses: actions/upload-artifact@v7
+        if: runner.os != 'Windows'
+        with:
+          name: pkg-wheel-${{ matrix.os }}
+          path: wheelhouse/*.whl
+          if-no-files-found: error
+      - name: Warn smctl does not support ARM64 yet
+        if: runner.os == 'Windows' && runner.arch == 'ARM64' && env.SIGN_WINDOWS_WHEELS == 'true'
+        run: echo "::warning::smctl does not support ARM64 yet; the ARM64 wheel will not be signed"
       - name: Install wheel package for signing
-        if: runner.os == 'Windows' && env.SIGN_WINDOWS_WHEELS == 'true'
+        if: runner.os == 'Windows' && runner.arch == 'X64' && env.SIGN_WINDOWS_WHEELS == 'true'
         run: python -m pip install wheel
       - name: Unpack khisto wheel
-        if: runner.os == 'Windows' && env.SIGN_WINDOWS_WHEELS == 'true'
+        if: runner.os == 'Windows' && runner.arch == 'X64' && env.SIGN_WINDOWS_WHEELS == 'true'
         run: |
           mkdir -p wheelhouse/unpacked
           python -m wheel unpack wheelhouse/khisto-*.whl --dest wheelhouse/unpacked
       - name: Setup SM_CLIENT_CERT_FILE from base64 secret data
-        if: runner.os == 'Windows' && env.SIGN_WINDOWS_WHEELS == 'true'
+        if: runner.os == 'Windows' && runner.arch == 'X64' && env.SIGN_WINDOWS_WHEELS == 'true'
         run: |
           echo "SM_CLIENT_CERT_FILE=D:\\Certificate_pkcs12.p12" >> "$GITHUB_ENV"
           echo "${{ secrets.SM_CLIENT_CERT_FILE_B64 }}" | base64 --decode > /d/Certificate_pkcs12.p12
       - name: Sign unpacked wheel binaries
-        if: runner.os == 'Windows' && env.SIGN_WINDOWS_WHEELS == 'true'
+        if: runner.os == 'Windows' && runner.arch == 'X64' && env.SIGN_WINDOWS_WHEELS == 'true'
         uses: digicert/code-signing-software-trust-action@v1.2.1
         with:
           input: wheelhouse/unpacked/
@@ -93,11 +103,12 @@ jobs:
           SM_API_KEY: ${{ secrets.SM_API_KEY }}
           SM_CLIENT_CERT_PASSWORD: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}
       - name: Repack signed wheels
-        if: runner.os == 'Windows' && env.SIGN_WINDOWS_WHEELS == 'true'
+        if: runner.os == 'Windows' && runner.arch == 'X64' && env.SIGN_WINDOWS_WHEELS == 'true'
         run: |
           rm wheelhouse/khisto-*.whl
           python -m wheel pack wheelhouse/unpacked/khisto-* --dest-dir wheelhouse
       - uses: actions/upload-artifact@v7
+        if: runner.os == 'Windows'
         with:
           name: pkg-wheel-${{ matrix.os }}
           path: wheelhouse/*.whl