Skip to content

[Feedback]: use a code signing certificate #38

Description

@natenjo

What problem are you trying to solve?

When you get the UAC prompt during installation/update, you see that the installer is not signed. This is bad practice as others could "pretend" to be command code.

Image

Also when using the command line installer/update, you run into:

irm https://raw.githubusercontent.com/CommandCodeAI/desktop/main/install.ps1 | iex
Downloading Command Code 0.1.18 for Windows...
Verified SHA-256: 4ceb0ec567b41db83fa344ef5b81407fb139cd19b6a0956c2117305d3f9e89e5
WARNUNG: This preview is not yet Authenticode signed.
Continue with the official verified installer? [y/N]:

If you condinue with the default ("N"), then the installation cancels.

What would improve it?

Improve trust in source

What do you do today?

No response

Product area

Installation and updates

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions