CommandCodeAI / CommandCodeAI/desktop

[Feedback]: use a code signing certificate

Open
#38 0 comments 0 reactions 1 assignee View on GitHub

@aliarain is already working on this.

Since Sep 7, 2026.

enhancement
Dominant language
Shell
Stars
80
Forks
2
PR merge metrics
No merged PRs in 30d

Description

What problem are you trying to solve?

When you get the UAC prompt during installation/update, you see that the installer is not signed. This is bad practice as others could "pretend" to be command code.

Image

Also when using the command line installer/update, you run into:

irm https://raw.githubusercontent.com/CommandCodeAI/desktop/main/install.ps1 | iex
Downloading Command Code 0.1.18 for Windows...
Verified SHA-256: 4ceb0ec567b41db83fa344ef5b81407fb139cd19b6a0956c2117305d3f9e89e5
WARNUNG: This preview is not yet Authenticode signed.
Continue with the official verified installer? [y/N]:

If you condinue with the default ("N"), then the installation cancels.

What would improve it?

Improve trust in source

What do you do today?

No response

Product area

Installation and updates

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.