[PR #14710] Code sign the contents of the Terminal package #30229

Open
opened 2026-01-31 09:39:27 +00:00 by claunia · 0 comments
Owner

Original Pull Request: https://github.com/microsoft/terminal/pull/14710

State: closed
Merged: Yes


Up until now, we have been relying on the catalog signature produced for our MSIX package.
There are some things (Packaged COM, Process Explorer as of 2022) that cannot handle catalog-signed
files. It's easier and safer for us to simply sign all the executables we produce before packaging them.

Unfortunately, we can't do it before we package them. We have to unpack and re-pack our package.

In the future, this will allow us to provide a codesigned distribution that is not in an MSIX package.

Validation Steps Performed

Ran a build and checked out the contents of the package. They were all signed!

Closes #13294
Closes #12695
Closes #9670

**Original Pull Request:** https://github.com/microsoft/terminal/pull/14710 **State:** closed **Merged:** Yes --- Up until now, we have been relying on the catalog signature produced for our MSIX package. There are some things (Packaged COM, Process Explorer as of 2022) that cannot handle catalog-signed files. It's easier and safer for us to simply sign all the executables we produce before packaging them. Unfortunately, we can't do it before we package them. We have to unpack and re-pack our package. In the future, this will allow us to provide a codesigned distribution that is not in an MSIX package. ## Validation Steps Performed Ran a build and checked out the contents of the package. They were all signed! Closes #13294 Closes #12695 Closes #9670
claunia added the pull-request label 2026-01-31 09:39:27 +00:00
Sign in to join this conversation.
No Label pull-request
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#30229