cloud-gov / cf-service-connect

Cloud Foundry CLI Service Connection Plugin
Other
18 stars 6 forks source link

Windows binaries should be signed #38

Open mogul opened 7 years ago

mogul commented 7 years ago

People using Government-Furnished Equipment (GFE) laptops (or similarly locked-down client Windows machines) can't easily use this plugin because it's delivered to their client as an unsigned Windows binary executable.

Signing the binary would make it easier for admins in such environments to whitelist either individual binaries, or us as publishers.

Note you can sign a binary using Microsoft's tools, or from a Linux/Mac platform signcode which is included in mono-devel.

mogul commented 7 years ago

Here's how the CF CLI team does it for that binary.