search

cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
1.61k stars 218 forks source link

installation scripts not remote signed #800

Closed Brjame closed 8 months ago

Brjame commented 9 months ago

Some of the installation scripts are not remote signed and require unblock

setup.ps1 and requiredversions.ps1

buidav commented 9 months ago

Did you download the ScubaGear v1.0.0 release zip or via GitHub's download zip button? Only the PowerShell scripts in the releases including and after ScubaGear v0.3.0 are signed.

Brjame commented 9 months ago

Scubagear v1.0.0 I believe. The file I have in my downloads folder is named ScubeGear-main.zip

Thanks,

Brian J.

From: David Bui @.> Sent: Tuesday, January 16, 2024 2:32 PM To: cisagov/ScubaGear @.> Cc: Brian James @.>; Author @.> Subject: Re: [cisagov/ScubaGear] installation scripts not remote signed (Issue #800)

You don't often get email from @.**@.>. Learn why this is importanthttps://aka.ms/LearnAboutSenderIdentification CAUTION: "Non - Red Wing Shoe Company Source"

Did you download the ScubaGear v1.0.0https://github.com/cisagov/ScubaGear/releases/download/v1.0.0/ScubaGear-1.0.0.zip release zip or via GitHub's download zip button? Only the PowerShell scripts in the releases including and after ScubaGear v0.3.0 are signedhttps://github.com/cisagov/ScubaGear?tab=readme-ov-file#powershell-execution-policies.

- Reply to this email directly, view it on GitHubhttps://github.com/cisagov/ScubaGear/issues/800#issuecomment-1894468426, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BFMVJIAZCVQWG6U26VRM75TYO3PT7AVCNFSM6AAAAABB5NAUYCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQOJUGQ3DQNBSGY. You are receiving this because you authored the thread.Message ID: @.**@.>>

buidav commented 9 months ago

Scubagear v1.0.0 I believe. The file I have in my downloads folder is named ScubeGear-main.zip

ScubaGear-main.zip is just a zipped up version of the current main branch. When unzipped correct version 1.0.0 folder should be named ScubaGear-1.0.0. Direct download link for ScubaGear v1.0.0.

Brjame commented 8 months ago

I managed to get the correct versions but in github if you go to Code and Download Zip I was getting a version of "main" that did not have signed Powershell scripts.

Thanks,

Brian J.

From: David Bui @.> Sent: Tuesday, January 16, 2024 5:14 PM To: cisagov/ScubaGear @.> Cc: Brian James @.>; Author @.> Subject: Re: [cisagov/ScubaGear] installation scripts not remote signed (Issue #800)

You don't often get email from @.**@.>. Learn why this is importanthttps://aka.ms/LearnAboutSenderIdentification CAUTION: "Non - Red Wing Shoe Company Source"

Scubagear v1.0.0 I believe. The file I have in my downloads folder is named ScubeGear-main.zip

ScubaGear-main.zip is just a zipped up version of the current main branch. When unzipped correct version 1.0.0 folder should be named ScubaGear-1.0.0. Direct download link for ScubaGear v1.0.0https://github.com/cisagov/ScubaGear/releases/download/v1.0.0/ScubaGear-1.0.0.zip.

- Reply to this email directly, view it on GitHubhttps://github.com/cisagov/ScubaGear/issues/800#issuecomment-1894670485, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BFMVJIDP34SMYS6US7LOR3DYO4CS3AVCNFSM6AAAAABB5NAUYCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQOJUGY3TANBYGU. You are receiving this because you authored the thread.Message ID: @.**@.>>

gdasher commented 8 months ago

Thanks, glad you got the right version. We'll look at making the docs more clear that you one should download a release vs a snapshot of main (which is effectively dev quality code).