code-signing

Official GitHub Action for veil-guard: automated CLI installation, threshold signing, Service Worker emission, and live deployment auditing.

🪶 Transcribe es una aplicación de escritorio portable en Python que permite transcribir audio a texto de forma rápida y confiable, optimizada para Windows. La app incluye entorno virtual integrado, acceso directo automático, soporte para alta resolución (HiDPI/4K) y firma de código digital para garantizar seguridad y confiabilidad en los scripts.

The EU Cyber Resilience Act chain, end to end and offline: SBOM, VEX, vulnerability scan, Article 14 reporting, signed updates, and an Annex VII pack that prints its own gaps first. Awareness cannot be backdated once anything is filed, and a dismissal cannot remove a legal deadline.

Node.js API wrapper and official Vite plugin for veil-guard zero-trust web asset integrity and code signing suite.

Sign Microsoft HLK submission packages (.hlkx) with an EV certificate in Azure Key Vault HSM — where signtool and dotnet sign can't.

Build and sign Niagara 4 & 5 modules in Docker, straight from your own Tridium installers — no Windows VM, no Workbench. Configurable signing certificate and output folder.

A small script that makes it easier to create a GPG key and configure git

Open-source local League (LCU) companion for PolyBrad / BradMarket Duels. Loopback only — no wallet keys, no phone-home.

Sandbox repo where the SCPE Action runs for real: a signed pull request, verified against the keys github.com publishes, sealed in a comment.

Zero-Trust Web Asset Integrity & Code Signing Suite for Modern SPAs and WebAssembly

electron-builder 打包 Windows 应用的安全加固：防止启动 exe / 卸载器被篡改与提权。基于 Electron 二进制实测与源码分析，含可直接使用的配置模板和 CI 验收脚本。

Sign AI instruction files from GitHub Actions with the workflow's own verified identity

Check a macOS release artifact before you ship it. Read-only: signature, notarization on both the app and the disk image, Sparkle appcast agreement, build-number monotonicity, dSYM UUID match.

MSIX package manifest check for Package.appxmanifest/AppxManifest.xml before Store or sideload release: publisher vs signing cert subject, 4-part versions, MinVersion/MaxVersionTested and build floor, restricted capabilities, missing logos, duplicate app Ids, reserved protocols, BCP 47 languages, with file:line. Namespaces by URI, no deps.

API platform info for encryption

Check the release setup of an Electron or Tauri desktop app before it ships: supported Electron version, safe web preferences, Windows signing, macOS notarization and update channels. Zero dependencies.

The classic Hello World. Electron flavoured.

Linux-first Appx/MSIX packaging: pack, sign, bundle and deploy Windows app packages without Windows tooling.

OpenSSL based Authenticode signing for PE/MSI/Java CAB files