avoid loop in cmd

Author: davegarthsimpson

.github/workflows/build.yml

@@ -468,25 +468,28 @@ jobs:
         env:
           CERT_PASSWORD: ${{ secrets.INSTALLER_CERT_WINDOWS_PASSWORD }}
           CONTAINER_NAME: ${{ secrets.INSTALLER_CERT_WINDOWS_CONTAINER }}
+        working-directory: ${{ env.BUILD_ARTIFACTS_PATH }}
         run: |
+          @echo off
           setlocal enabledelayedexpansion
-          cd "%BUILD_ARTIFACTS_PATH%"
-          for %%F in (*_unsigned.zip) do (
-            set "zipfile=%%F"
-            set "dirname=%%~nF"
-            set "newzipfile=%%~nF"
-            set "newzipfile=!newzipfile:_unsigned=!.zip"
-            
-            mkdir "!dirname!"
-            tar -xf "!zipfile!" -C "!dirname!"
-            pushd "!dirname!"
-            
-            "%SIGNTOOL_PATH%" sign -d "Arduino IDE" -f "%INSTALLER_CERT_WINDOWS_CER%" -csp "eToken Base Cryptographic Provider" -k "[{{%CERT_PASSWORD%}}]=%CONTAINER_NAME%" -fd sha256 -tr http://timestamp.digicert.com -td SHA256 -v "Arduino IDE.exe"
-            
-            popd
-            tar -a -cf "!newzipfile!" "!dirname!"
-            rmdir /s /q "!dirname!"
+          
+          for /r %%i in (*_unsigned.zip) do (
+            set "zipfile=%%i"
+            goto :break
           )
+          :break
+          
+          set "dirname=!zipfile:_unsigned.zip=!"
+          set "newzipfile=!dirname!.zip"
+          
+          mkdir "!dirname!"
+          tar -xf "!zipfile!" -C "!dirname!"
+          
+          "%SIGNTOOL_PATH%" sign -d "Arduino IDE" -f "%INSTALLER_CERT_WINDOWS_CER%" -csp "eToken Base Cryptographic Provider" -k "%CERT_PASSWORD%" -fd sha256 -tr http://timestamp.digicert.com -td SHA256 -v "!dirname!\Arduino IDE.exe"
+          
+          tar -a -cf "!newzipfile!" "!dirname!"
+          
+          rmdir /s /q "!dirname!"
 
       - name: Upload signed EXE
         uses: actions/upload-artifact@v3