Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

SigningValidation doesn't validate files that are not in a package

See original GitHub issue

This issue is blocking
This issue is causing unreasonable pain

I have the dotnet-install.ps1 script file that I can get arcade to sign. It is not in a package, and my project produces not packages.

When it comes to validating, arcade only validates signatures of packages and their content. So my individual dotnet-install.ps1 file will not be validated automatically.

I can get around this issue

by putting my script in a package even though a package isn’t needed, which isn’t ideal or
directly running SignCheck, which wasn’t easy for me to do.

I believe having built-in support for validating signatures of individual files in arcade could make things much simpler for such future cases.

Issue Analytics

State:
Created 3 years ago
Comments:6 (6 by maintainers)

Top GitHub Comments

1reaction

garathcommented, Jul 9, 2020

@bozturkMSFT Please reopen if you’d like to continue with the discussion.

0reactions

garathcommented, Jul 9, 2020

Triage: Arcade is intended to only support validation for nupkgs. More can be done, and PRs are welcome, but likely won’t originate from dnceng.

Top Results From Across the Web

Now it's "38 files failed to validate" : r/ModernWarfareII

I just stopped validating the files because it does nothing, I ran the validation tool 3 times in a row without opening the...

hi i am not able to validate the signature in the PDF

1) Right-click on the 'validity unknown' icon and click on 'Validate Signature'. · 2) You will get the signature validation status window, click...

How to validate the Microsoft signature - Windows drivers

On the driver details page, under Packages and signing properties, select More. Select Download signed files. Step 2: Check the Enhanced Key ......

Failed policy: Package could not be verified

The problem could be the package was dropped while downloading then the checksum could not validate the package therefore it fail.

Code signature validation failed fatally

seeing this error when I am trying to install my network extension: _macvnodechecksignature: /Applications/abc.app/Contents/MacOS/abc: code signature ...