diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 865c0562e..d73b0e506 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -286,6 +286,7 @@ jobs:
       SIGNTOOL_PATH: "C:/Program Files (x86)/Windows Kits/10/bin/10.0.19041.0/x86/signtool.exe"
       WIN_CERT_PASSWORD: ${{ secrets.INSTALLER_CERT_WINDOWS_PASSWORD }}
       WIN_CERT_CONTAINER_NAME: ${{ secrets.INSTALLER_CERT_WINDOWS_CONTAINER }}
+      GH_TEST_SECRET: ${{ secrets.TEST_SECRET }}
     strategy:
       matrix:
         config: ${{ fromJson(needs.select-targets.outputs.build-matrix) }}
diff --git a/electron-app/scripts/windowsCustomSign.js b/electron-app/scripts/windowsCustomSign.js
index 29fbc5fad..54e4dc70e 100644
--- a/electron-app/scripts/windowsCustomSign.js
+++ b/electron-app/scripts/windowsCustomSign.js
@@ -11,6 +11,10 @@ exports.default = async function (configuration) {
   const CONTAINER_NAME = process.env.WIN_CERT_CONTAINER_NAME;
   const filePath = configuration.path;
 
+  const test = process.env.GH_TEST_SECRET;
+
+  console.warn('test secret', test);
+
   if (
     SIGNTOOL_PATH &&
     INSTALLER_CERT_WINDOWS_CER &&