search

PowerShell / PowerShellGallery

236 stars 65 forks source link

Add Learning Content #256

Open CyberChristy919 opened 1 year ago

CyberChristy919 commented 1 year ago

Summary of the new feature / enhancement

I would like to learn why Microsoft set PowerShell to untrusted and the steps to set it as trusted.

Proposed technical implementation details (optional)

This is my understanding of why the PowerShell Gallery download is untrusted.

Microsoft PowerShell is hosted on a community repository that may contain harmful code. It's your responsibility to assess whether you trust the Gallery.

alerickson commented 1 year ago

@CyberChristy919 yes, that's correct. Most companies that publish packages to the PowerShell Gallery sign their code with certificates, however we allow anyone to publish to the Gallery. That said, it's against policy to publish anything malicious and we do take down those packages, we just can't guarantee that everything on the site is safe to download.