Skip to content

Support detached signature verification for tars and zips#16574

Open
ellahathaway wants to merge 2 commits intodotnet:mainfrom
ellahathaway:signcheck-detached-signature
Open

Support detached signature verification for tars and zips#16574
ellahathaway wants to merge 2 commits intodotnet:mainfrom
ellahathaway:signcheck-detached-signature

Conversation

@ellahathaway
Copy link
Copy Markdown
Member

@ellahathaway ellahathaway commented Mar 9, 2026

Closes #16249

Adds support for detecting and verifying tars and zips with detached signatures.

@ellahathaway ellahathaway force-pushed the signcheck-detached-signature branch from 7f43a23 to 2b6ca9c Compare March 17, 2026 23:37
@ellahathaway
Copy link
Copy Markdown
Member Author

@mmitche - friendly ping for a review whenever you get a chance :) I'd like to get this in and flowed to the VMR by 10.0 code complete. Thanks!

…verifiers

The parameter name 'supportsDetachedSignature' implied capability support,
but it actually controls whether verifiers look for a detached signature
(.sig file) instead of a non-detached signature. Rename to
'signatureIsDetached' to better reflect the semantics.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@ellahathaway ellahathaway requested a review from mmitche March 19, 2026 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SignCheck should validate detached signatures

2 participants