Introducing “Visual Studio VSIX Signer”, a GitHub Action that assists you in signing your Visual Studio extensions through a workflow on GitHub!
Imagine you have a workflow in GitHub that builds your extension and posts the resulting VSIX file as an artifact to the run that you then have to download, sign, and then upload to the marketplace MANUALLY. Before you post the artifact, just drop in this new GitHub Action to sign that VSIX file!
steps:
- name: Visual Studio VSIX Signer
uses: CodingWithCalvin/GHA-VSVsixSigner@v1
with:
# REQUIRED
sign-certificate-path: ./src/SigningCert.snk
vsix-path: ./src/outputFolder/Extension.vsix
sign-password: $
# OPTIONAL
vs-version: latest
vs-prerelease: false
Provide the path to your certificate, the path to the VSIX, and your signing password and violá - sit back and relax while all the magic happens for you. Note there are a couple other optional parameters to control which version of the Visual Studio SDK tooling gets used under the hood, but by default, you’ll utilize the latest version available on the images. I could use some additional help testing this, though, as I don’t sign any of my own extensions (maybe I’ll start now!).
Of course, its open source, so feel free to peruse the source code, create issues, and have discussions on ways we can make this tool even better!
This post, "Introducing the 'Visual Studio VSIX Signer' GitHub Action", first appeared on https://www.codingwithcalvin.net/introducing-the-visual-studio-vsix-signer-github-action/