binaries are not digitally signed

Open
#648 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
csharp, vscode
Domain
release, security

Research direction

Start by inspecting the unsigned .exe and .dll files under .vscode\extensions\ms-cst-e.vscode-devskim-1.0.33\devskimBinaries and tracing how that extension package is produced. Determine where signing belongs in the packaging flow, then verify that the distributed binaries have valid digital signatures and can run on the affected machines.

Written by the indexing model from the issue text.

Description

bug

Describe the bug
exe and dll files in .vscode\extensions\ms-cst-e.vscode-devskim-1.0.33\devskimBinaries are not digitally signed.
unsigned code is not allowed to run on our machines.

Dominant language
C#
Stars
1k
Forks
132
Avg merge
1m
Merged PRs (30d)
1

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from microsoft/DevSkim

All issues in microsoft/DevSkim

Similar issues

More C# issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.