MethodsAndPractices / vsteam

PowerShell module for accessing Azure DevOps Services and Azure DevOps Server (formerly VSTS or TFS)
https://methodsandpractices.github.io/vsteam-docs/
MIT License
442 stars 155 forks source link

Installation failed because 'SHiPS' module the authenticode signature is not valid. #449

Closed VectorBCO closed 2 years ago

VectorBCO commented 2 years ago

Steps to reproduce

Install-Module -Name VSTeam -Repository PSGallery -Scope CurrentUser

Untrusted repository
You are installing the modules from an untrusted repository. If you trust this repository, change its InstallationPolicy value by running the Set-PSRepository cmdlet. Are you sure you want to install the
modules from 'PSGallery'?
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [S] Suspend  [?] Help (default is "N"): Y

Expected behavior

I expected that module will be installed.

Actual behavior?

Install-Package: The module 'SHiPS' cannot be installed or updated because the authenticode signature of the file 'SHiPS.psd1' is not valid.

On Which OS have you tried it?

Windows

What was your server version?

Azure DevOps Services

Other server version

No response

Log output of used API

-

Log output of $PSVersionTable

Name                           Value
----                           -----
PSVersion                      7.2.1
PSEdition                      Core
GitCommitId                    7.2.1
OS                             Microsoft Windows 10.0.19044
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0
SebastianSchuetze commented 2 years ago

Thanks for reporting. But I don't see how we can influence this. Any idea?

SebastianSchuetze commented 2 years ago

If you get an error the you can still use

Install-Module VSTeam -Scope CurrentUser -SkipPublisherCheck

closing it for now. As this is a problem with the SHiPS module. We had a look at it already: #298

VectorBCO commented 2 years ago

my guess, that is not ok to just ignore the issue with adding skip verification during installation process. In this case could be faced security violation, with not progressed results

VectorBCO commented 2 years ago

I have no idea who should fix this, but at least this issue should be reported to the proper team