bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2026-02-25 09:03:28 +00:00
Code Issues Releases Wiki Activity

Update sign.js

Browse Source
This commit is contained in:
Anders Åberg
2025-11-06 23:37:15 +01:00
parent 0d212a7ebb
commit 7a85771a6c
1 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
apps/desktop/sign.js
View File

@@ -8,6 +8,34 @@ exports.default = async function (configuration) {
configuration.path.endsWith(".msix"))
) {
console.log(`[*] Signing file: ${configuration.path}`);
// If signing APPX/MSIX, inspect the manifest Publisher before signing
if (configuration.path.endsWith(".appx") || configuration.path.endsWith(".msix")) {
try {
const manifestContent = require("child_process").execSync(
`powershell -Command "Add-Type -AssemblyName System.IO.Compression.FileSystem; ` +
`$zip = [System.IO.Compression.ZipFile]::OpenRead('${configuration.path}'); ` +
`$entry = $zip.Entries | Where-Object { $_.FullName -eq 'AppxManifest.xml' }; ` +
`$stream = $entry.Open(); ` +
`$reader = New-Object System.IO.StreamReader($stream); ` +
`$content = $reader.ReadToEnd(); ` +
`$reader.Close(); $stream.Close(); $zip.Dispose(); ` +
`Write-Output $content"`,
{ encoding: "utf8" },
);
// Extract and display the Publisher line
const publisherMatch = manifestContent.match(/Publisher='([^']+)'/);
if (publisherMatch) {
console.log(`[*] APPX Manifest Publisher: ${publisherMatch[1]}`);
} else {
console.log(`[*] Could not find Publisher in manifest`);
}
} catch (error) {
console.log(`[!] Failed to read manifest: ${error.message}`);
}
}
require("child_process").execSync(
`azuresigntool sign -v ` +
`-kvu ${process.env.SIGNING_VAULT_URL} ` +