chocolatey / chocolatey-licensed-issues

Issues for Licensed Editions of Chocolatey
19 stars 13 forks source link

Add Trusted Package Maintainer Verification to Packages #308

Closed ryanrichter94 closed 2 years ago

ryanrichter94 commented 2 years ago

Is Your Feature Request Related To A Problem? Please describe.

Customer recently brought up that they would like a way to only be bale to run packages that are verified by them in some way. Thinking this could be achieved via the addition of a .nuspec field like we do with the CCM SALT config value. As a further way of authenticating/verifying packages.

Describe The Solution. Why is it needed?

Thought process is the customer would like a way to verify the package comes from a secure source and they have reviewed it before it is able to be processed on a client machine.

Related Issues

ryanrichter94 commented 2 years ago

Closing this off as https://github.com/chocolatey/choco/issues/504 is a request for the same type of thing.