microsoft / microsoft/secureboot_objects
[Feature]: automatically parse signed / unsigned update bins as JSON for review
@Flickdm is already working on this.
Since May 19, 2026.
- #417 by @copilot-swe-agent — closed without merging
- Dominant language
- Python
- Stars
- 289
- Forks
- 89
- Avg merge
- 3d 10h
- Merged PRs (30d)
- 7
Description
Feature Overview
Improve the review process such that binary files that are found that are EFI_SIGNATURE_LISTS / Authenticated Variables are automatically processed and converted into a human readable format as part of a github action. This willl improve the reviewers ability to review and improve history.
Solution Overview
https://github.com/microsoft/secureboot_objects/blob/main/scripts/auth_var_tool.py
https://github.com/microsoft/secureboot_objects/blob/main/scripts/utility_functions.py
These functions already partially implement this behavior. we can likely get away with using "utility_functions" in a pipeline but may want to rename that file
Alternatives Considered
No response
Urgency
Low
Are you going to implement the feature request?
I will implement the feature
Do you need maintainer feedback?
No maintainer feedback needed
Anything else?
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.