UNSIGNED=$(wildcard pandoc-*-UNSIGNED.msi) SIGNED=$(patsubst %-UNSIGNED.msi, %.msi, $(UNSIGNED)) all: $(SIGNED) .PHONY: all pandoc-%.msi: pandoc-%-UNSIGNED.msi osslsigncode sign -pkcs12 $$HOME/Private/SectigoCodeSigning.exp2023.p12 -in $< -i https://johnmacfarlane.net/ -t http://timestamp.comodoca.com/ -out $@ -askpass && rm $<