Apply to SignPath Foundation for free OSS code signing
Maintainers usually reply within 1 day
@DeepDiver1975 is already working on this.
Since Sep 4, 2026.
Assessment
This issue has not been assessed yet.
Description
Goal
Get the Windows MSI (and ideally other artifacts) code-signed via SignPath Foundation's free program for open-source projects, so releases stop showing "Unknown Publisher" / SmartScreen warnings.
Why SignPath
- Free OV-level code signing for qualifying OSS projects, GitHub Actions native.
- Alternatives ruled out: Microsoft Trusted Signing individual-developer onboarding is currently paused (2026); Certum/SSL.com discounted certs are paid fallbacks.
Eligibility checklist (signpath.org/terms)
- OSI-approved license without dual-licensing (MIT)
- No proprietary/non-OSS components
- Actively maintained
- Already released in signable form (MSI via GitHub Releases)
- Functionality documented (README)
- Published code-signing policy on project homepage (needed before signing starts, not for application)
- Defined Author/Reviewer/Approver roles (can be solo maintainer as Approver)
- MFA enabled on GitHub for all team members (to verify)
Status
Application in progress — this issue will be updated with the outcome once submitted.
- Dominant language
- C#
- Stars
- 1
- Forks
- 3
- Avg merge
- 4h 34m
- Merged PRs (30d)
- 182
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from CodeForFire/lagebuch
-
bug ux
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
CodeForFire/lagebuch#714 ·
Maintainers usually reply within 1 day
-
bug ux
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
CodeForFire/lagebuch#713 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
CodeForFire/lagebuch#405 ·
Maintainers usually reply within 1 day
-
documentation good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
CodeForFire/lagebuch#349 ·
Maintainers usually reply within 1 day
-
documentation good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
CodeForFire/lagebuch#348 ·
Maintainers usually reply within 1 day
All issues in CodeForFire/lagebuch
Similar issues
-
/api/oauth/introspect emits clientId and tokenType instead of RFC 7662's client_id and token_typeOpenbug P2
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
nightscout/nocturne#2317 ·
Maintainers usually reply within 1 day
-
[BUG]: Position intent set on a simple order is dropped when it becomes a bracket, OCO or OTO orderPossibly taken @RaphaelFakhri claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
alpacahq/alpaca-trade-api-csharp#903 ·
Maintainers usually reply within 2 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 64/100
joinrpg/joinrpg-net#5752 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
dimitar-radenkov/Pointframe#294 ·
Maintainers usually reply within 1 day
-
kind/feature-request
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Altinn/altinn-correspondence#2154 ·
Maintainers usually reply within 1 day