saltstack / saltstack/salt-bootstrap

[FEATURE REQUEST] Scripts should be signed

Open
#1,898 3 comments 2 reactions 1 assignee View on GitHub

@twangboy is already working on this.

Since Dec 13, 2024.

Dominant language
Shell
Stars
952
Forks
543
Avg merge
1d 7h
Merged PRs (30d)
5

Description

Description of Issue/Question

We should probably sign our scripts when we do a release.

On Windows this means we can set the Execution Policy to "RemoteSigned" to add some security while still allowing the bootstrap script to run. I'm assuming we would want to sign the Linux script as well.

For Windows this would need to be an OV Certificate. I'm assuming we could use the same for Linux.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.