Feature request - Access environment variable from signtool

[Tom Moore]

It would be nice to be able to use the value from an environment variable in the signtool configuration.  This way a secret password would not have to be stored somewhere in the Inno Setup configuration.

[Gavin Lambert]

On Tuesday, August 26, 2025 at 7:44:50 AM UTC+12 Tom Moore wrote:

It would be nice to be able to use the value from an environment variable in the signtool configuration.  This way a secret password would not have to be stored somewhere in the Inno Setup configuration.

You can specify a ps1 or cmd script as your signtool, and access the environment variable from there.

Other options include using {#GetEnv("...")} within the SignTool in the script (passing it via $p), or using /S to pass the signtool configuration from a higher-level build script and injecting it there.