From ee1c97f2bc1c2839cb1f56cd900c61d703b32c64 Mon Sep 17 00:00:00 2001
From: ehl-jf <hervee@jfrog.com>
Date: Thu, 28 May 2026 10:42:49 +0200
Subject: [PATCH] ci(jenkins): skip Windows executable signing when
 RUN_CHOCOLATEY is disabled

Gate the Windows signing block in build() and the downloadToolsCert()
call on params.RUN_CHOCOLATEY so dev/test runs without the Chocolatey
stage don't require the signing cert and Docker-based signing step.
---
 Jenkinsfile | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index c9c7ed875..a8913b00a 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -145,7 +145,9 @@ def runRelease(architectures) {
         }
 
         // We sign the binary also for the standalone Windows executable, and not just for Windows executable packaged inside Chocolaty.
-        downloadToolsCert()
+        if (params.RUN_CHOCOLATEY) {
+            downloadToolsCert()
+        }
         if (params.RUN_UPLOAD_CLI) {
             stage('Upload CLI') {
                 print "Uploading version $version to Repo21"
@@ -445,7 +447,7 @@ def build(goos, goarch, pkg, fileName) {
         env.GOOS=""
         env.GOARCH=""
 
-        if (goos == 'windows') {
+        if (goos == 'windows' && params.RUN_CHOCOLATEY) {
             dir("${jfrogCliRepoDir}build/sign") {
                 // Move the jfrog executable into the 'sign' directory, so that it is signed there.
                 sh "mv ${jfrogCliRepoDir}${fileName} ${fileName}.unsigned"