{"action":"created","issue":{"url":"https://api.github.com/repos/chocolatey/choco/issues/1665","repository_url":"https://api.github.com/repos/chocolatey/choco","labels_url":"https://api.github.com/repos/chocolatey/choco/issues/1665/labels{/name}","comments_url":"https://api.github.com/repos/chocolatey/choco/issues/1665/comments","events_url":"https://api.github.com/repos/chocolatey/choco/issues/1665/events","html_url":"https://github.com/chocolatey/choco/issues/1665","id":373064583,"node_id":"MDU6SXNzdWUzNzMwNjQ1ODM=","number":1665,"title":"Digitally sign PowerShell files","user":{"login":"benjmor","id":44407400,"node_id":"MDQ6VXNlcjQ0NDA3NDAw","avatar_url":"https://avatars1.githubusercontent.com/u/44407400?v=4","gravatar_id":"","url":"https://api.github.com/users/benjmor","html_url":"https://github.com/benjmor","followers_url":"https://api.github.com/users/benjmor/followers","following_url":"https://api.github.com/users/benjmor/following{/other_user}","gists_url":"https://api.github.com/users/benjmor/gists{/gist_id}","starred_url":"https://api.github.com/users/benjmor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benjmor/subscriptions","organizations_url":"https://api.github.com/users/benjmor/orgs","repos_url":"https://api.github.com/users/benjmor/repos","events_url":"https://api.github.com/users/benjmor/events{/privacy}","received_events_url":"https://api.github.com/users/benjmor/received_events","type":"User","site_admin":false},"labels":[{"id":163217590,"node_id":"MDU6TGFiZWwxNjMyMTc1OTA=","url":"https://api.github.com/repos/chocolatey/choco/labels/0%20-%20_Triaging","name":"0 - _Triaging","color":"eeeeee","default":false},{"id":161961289,"node_id":"MDU6TGFiZWwxNjE5NjEyODk=","url":"https://api.github.com/repos/chocolatey/choco/labels/Bug","name":"Bug","color":"fc2929","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-10-23T15:34:09Z","updated_at":"2018-10-28T17:50:33Z","closed_at":null,"author_association":"NONE","body":"Although the Chocolatey binaries are signed, the PowerShell scripts (those of type .ps1 or .psm1) are not signed. This causes blocks in environments that use script whitelisting.\r\n\r\nOne example is in choco\\nuget\\chocolatey\\tools\\init.ps1. It's a short PowerShell file, but it can still trigger alerts/blocks since it is unsigned."},"comment":{"url":"https://api.github.com/repos/chocolatey/choco/issues/comments/433726452","html_url":"https://github.com/chocolatey/choco/issues/1665#issuecomment-433726452","issue_url":"https://api.github.com/repos/chocolatey/choco/issues/1665","id":433726452,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMzcyNjQ1Mg==","user":{"login":"ferventcoder","id":63502,"node_id":"MDQ6VXNlcjYzNTAy","avatar_url":"https://avatars0.githubusercontent.com/u/63502?v=4","gravatar_id":"","url":"https://api.github.com/users/ferventcoder","html_url":"https://github.com/ferventcoder","followers_url":"https://api.github.com/users/ferventcoder/followers","following_url":"https://api.github.com/users/ferventcoder/following{/other_user}","gists_url":"https://api.github.com/users/ferventcoder/gists{/gist_id}","starred_url":"https://api.github.com/users/ferventcoder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ferventcoder/subscriptions","organizations_url":"https://api.github.com/users/ferventcoder/orgs","repos_url":"https://api.github.com/users/ferventcoder/repos","events_url":"https://api.github.com/users/ferventcoder/events{/privacy}","received_events_url":"https://api.github.com/users/ferventcoder/received_events","type":"User","site_admin":false},"created_at":"2018-10-28T17:50:33Z","updated_at":"2018-10-28T17:50:33Z","author_association":"MEMBER","body":"Let's call it a bug - we don't sign this script as it is not used - \r\n\r\nhttps://github.com/chocolatey/choco/blob/ea4b155ad4f6911c003fcf30792f85abca480f05/.build.custom/codeSign.step#L124"}}
{"actor":{"display_login":"ferventcoder"}}