don't sign PR builds

.github/workflows/macos.yml

@@ -36,14 +36,21 @@ jobs:
     - name: Prepackage plugins
       run: scripts/prepackage-plugins.js
 
-    - name: Build packages
+    - name: Build and sign packages
       run: scripts/build-macos.js
+      if: github.head_ref
       env:
         DEBUG: electron-builder,electron-builder:*
         GH_TOKEN: ${{ secrets.GH_TOKEN }}
         CSC_LINK: ${{ secrets.CSC_LINK }}
         CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
 
+    - name: Build packages without signing
+      run: scripts/build-macos.js
+      if: "! github.head_ref"
+      env:
+        DEBUG: electron-builder,electron-builder:*
+
     - name: Package artifacts
       run: |
         mkdir artifact-pkg

.github/workflows/windows.yml

@@ -20,12 +20,19 @@ jobs:
         node scripts/build-native.js
         yarn run build
         node scripts/prepackage-plugins.js
-        node scripts/build-windows.js
+
+    - name: Build and sign packages
+      run: node scripts/build-windows.js
+      if: github.head_ref
       env:
         GH_TOKEN: ${{ secrets.GH_TOKEN }}
         WIN_CSC_LINK: ${{ secrets.WIN_CSC_LINK }}
         WIN_CSC_KEY_PASSWORD: ${{ secrets.WIN_CSC_KEY_PASSWORD }}
 
+    - name: Build packages without signing
+      run: node scripts/build-windows.js
+      if: "! github.head_ref"
+
     - name: Package artifacts
       run: |
         mkdir artifact-setup