Install CA certificates for signing

Author: damianh

.github/workflows/access-token-management-ci.yml

@@ -57,6 +57,14 @@ jobs:
         fail-on-error: true
         fail-on-empty: true
 
+    - name: Install Sectigo CodeSiging CA certificates
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y ca-certificates
+        sudo cp build/SectigoPublicCodeSigningCAR36.crt /usr/local/share/ca-certificates/
+        sudo update-ca-certificates
+        openssl x509 -in /usr/local/share/ca-certificates/SectigoPublicCodeSigningCAR36.crt -text -noout
+
     - name: Sign
       if: (github.ref == 'refs/heads/main' || contains(github.ref, 'refs/tags/'))
       env: