Digital signatures for executable binaries · Issue #1885 · vscode-shellcheck/vscode-shellcheck · GitHub
Skip to content

Digital signatures for executable binaries #1885

Open

Description

@taylor-madeak

It's 2026 and enforcement of digitally signed code requirements is only increasing. Windows Defender prompts the user with a scary "Unknown Publisher" warning when attempting to run unsigned executables and installers, macOS Gatekeeper will straight-up block it with SIP, and even certain Nix distros (e.g. Solaris, Gentoo) can be configured to block execution of unsigned code. This problem is exacerbated when an organization's Enterprise Security Office gets involved, as we often see tools like Carbon Black App Control, Cortex XDR, and BeyondTrust EPM in use on enterprise managed devices.

The point I'm trying to make is: code signing is good, it's easy, and it's free.

I realize that's a lot of links in a row. I promise this isn't an ad, I'm just trying to use this extension on my work laptop without having to bug the ESO to unblock it every time it updates. 😐

Please sign your releases and the binaries contained within. 🙏

Activity

  1. felipecrs commented on Jul 23, 2026

    @felipecrs
    Member

    As per the binaries, we take them from koalaman/shellcheck directly. Please request it there.

  2. taylor-madeak commented on Jul 24, 2026

    @taylor-madeak
    Author

    Interesting. I'll get an issue opened over there as well.

  3. felipecrs commented on Sep 7, 2026

    @felipecrs
    Member
  4. timonwong commented on Oct 11, 2026

    @timonwong
    Member

    I think the alterantive is wasm, which is experimental right now :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions