search

eclipse / openvsx

An open-source registry for VS Code extensions
https://open-vsx.org/
Eclipse Public License 2.0
1.26k stars 142 forks source link

Update signature validation logic #939

Closed hoangphamEclipse closed 5 months ago

hoangphamEclipse commented 5 months ago

Since the signature format has been updated in PR #928, the mirror needs to update its logic for signature validation when mirroring extensions from upstream. With this commit, now the mirror will extract the signature zip file and look for the signature, then use this signature to validate the vsix.

Fixes #938.

amvanbaren commented 5 months ago

Thanks @hoangphamEclipse!