ci: optimize the build and test experience for fork PRs

Author: huoshen80

.github/workflows/build.yml

@@ -22,7 +22,8 @@ jobs:
             rust_target: x86_64-pc-windows-msvc
           - os: windows-latest
             rust_target: aarch64-pc-windows-msvc
-    environment: TAURI_KEY # 指定使用这个环境
+    # 主仓库可以访问 TAURI_KEY environment，fork PR 访问不到但不会失败
+    environment: ${{ (github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request') && 'TAURI_KEY' || '' }}
     permissions:
       contents: read
 
@@ -127,6 +128,34 @@ jobs:
           linker = "lld-link"
           EOF
           fi
+
+      # Fork PR：完全禁用 updater 以支持无签名构建
+      - name: Disable updater for fork PR
+        if: github.event.pull_request.head.repo.full_name != github.repository
+        shell: bash
+        run: |
+          echo "🔍 Detected fork PR, disabling updater for unsigned build..."
+          node -e "
+            const fs = require('fs');
+            const path = './src-tauri/tauri.conf.json';
+            const config = JSON.parse(fs.readFileSync(path, 'utf8'));
+            
+            // 完全移除 updater 插件配置
+            if (config.plugins && config.plugins.updater) {
+              delete config.plugins.updater;
+              console.log('✅ Removed updater plugin configuration');
+            }
+            
+            // 禁用 updater artifacts 生成
+            if (config.bundle) {
+              config.bundle.createUpdaterArtifacts = false;
+              console.log('✅ Disabled updater artifacts generation');
+            }
+            
+            fs.writeFileSync(path, JSON.stringify(config, null, '\t'));
+            console.log('✅ Fork build will work normally but without auto-update support');
+          "
+
       - name: Build with Tauri Action
         uses: tauri-apps/tauri-action@v0
         env:
@@ -145,6 +174,17 @@ jobs:
           includeRelease: true
           tauriScript: pnpm tauri
 
+      # 显示构建状态
+      - name: Build status
+        shell: bash
+        run: |
+          if [ "${{ github.event.pull_request.head.repo.full_name }}" != "${{ github.repository }}" ] && [ "${{ github.event_name }}" == "pull_request" ]; then
+            echo "⚠️ Fork PR: Build completed WITHOUT signing"
+            echo "   The application will work but won't support auto-updates"
+          else
+            echo "✅ Build completed with signing enabled"
+          fi
+
       # Upload build artifacts for testings
       - name: Upload Executable (Artifact)
         if: matrix.os == 'windows-latest'