Repository navigation

Verify Open VSX extension signatures — installs and extension updates work again - #103

Open

ndemianc wants to merge 5 commits into

feat/extension-signature-verification

Commits on Oct 5, 2026

feat(extensions): a verifier for Open VSX signatures, with the registry's key pinned
ndemianc
committed
a57e99f
build: the app ships the signature verifier — installed, checked, and asked directly
ndemianc
committed
5da84f0
ci: ask Open VSX which key it signs with, every day
ndemianc
committed
d4d58f2
fix(registry): #103 review — a redirect is followed by hand, and only to where the registry keeps its files
ndemianc
committed
5c9bce0
Merge branch 'develop' into feat/extension-signature-verification
ndemianc
authored
8a758b1