Sign binary only if compiled

[kevina]

One method is to add another Sign Code step before your current Sign Code step, set to Verify (command) which will fail if the binary is unsigned. Also set this "verify" step to Continue Building on failure.

Then conditionally build your (immediately following) actual Sign Code step to only build when the last step failed (use this script expression):

[%LASTSTEP_STATUS% = vbldStepStatFailed]

"is true"