dotnet / dotnet/arcade

Improving Cross-Platform Signing Validation in Arcade's Post-Build Process

Open
#15,709 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
729
Forks
397
Avg merge
3d 15m
Merged PRs (30d)
149

Description

SignCheck has recently been updated to include verification for a variety of file types, including but not limited to: pkgs, deb, rpm, tar.gz, and others. However, due to limitations in tooling, these files cannot be consistently verified across all platforms and .NET versions. As a result, some file types can only be validated on specific platforms or .NET versions.

Currently, signing validation is an optional step in Arcade's post-build process, but it is only executed on Windows with .NET Framework. As a result, certain file types are being skipped in the validation process. To address this, I recommend updating the post-build template to run signing validation across all platforms and .NET versions.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.