The WPF nuget package isn't signed by our CI #19934

Closed
opened 2026-01-31 06:57:55 +00:00 by claunia · 2 comments
Owner

Originally created by @zadjii-msft on GitHub (May 23, 2023).

Originally assigned to: @DHowett on GitHub.

From Teams with @javierdlg

We hit a snag with out insertion process and we found out that the Microsoft.Terminal.Wpf package does not contain signed files
Is there a reason for this? Or is the sign step just not part of the release pipeline?

I honestly don't know... I bet we just forgot it 😅

Originally created by @zadjii-msft on GitHub (May 23, 2023). Originally assigned to: @DHowett on GitHub. From Teams with @javierdlg > We hit a snag with out insertion process and we found out that the Microsoft.Terminal.Wpf package does not contain signed files > Is there a reason for this? Or is the sign step just not part of the release pipeline? > I honestly don't know... I bet we just forgot it 😅
claunia added the Issue-BugIn-PRNeeds-Tag-FixProduct-TerminalArea-WPFControl labels 2026-01-31 06:57:56 +00:00
Author
Owner

@DHowett commented on GitHub (May 23, 2023):

This actually is known! VS used to re-sign our binaries before deployment.

I was dismayed to learn that signing the nupkg does not sign the inner DLLs. Then again, neither did the MSIX.

@DHowett commented on GitHub (May 23, 2023): This actually is known! VS used to re-sign our binaries before deployment. I was dismayed to learn that signing the `nupkg` does not sign the inner DLLs. Then again, neither did the `MSIX`.
Author
Owner

@javierdlg commented on GitHub (May 23, 2023):

Not a pressing issue atm, we are currently signing the dlls ourselves but it would be best if they came already signed since we get security warnings about signing 3rd party dlls.

Thanks for looking into this!

@javierdlg commented on GitHub (May 23, 2023): Not a pressing issue atm, we are currently signing the dlls ourselves but it would be best if they came already signed since we get security warnings about signing 3rd party dlls. Thanks for looking into this!
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#19934