Return non-zero exit code when signature verification fails #1233

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

benibenj merged 1 commit into microsoft:main from JoeRobich:dev/jorobich/set-exitcode

Dec 17, 2025

+3 −0

Merged

Return non-zero exit code when signature verification fails #1233

Return non-zero exit code when signature verification fails

Annotations

3 errors and 10 warnings

Run tests

Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging. found npm access token: npm_Ab3kZy0X9QpLmN4tUvW7aB... [npm] src\test\fixtures\secrets\secret2.ts#1:19-1:59 In case of false positives, you can allow specific types of secrets with --allow-package-secrets npm or use --allow-package-all-secrets to skip this check entirely (not recommended).

Run tests

Potential security issue detected: Your extension package contains sensitive information that should not be published. Please remove these secrets before packaging. found private key: -----BEGIN OPENSSH PRIVATE KEY-... [privatekey] src\test\fixtures\secrets\secret1.ts#2:1-9:34 In case of false positives, you can allow specific types of secrets with --allow-package-secrets privatekey or use --allow-package-all-secrets to skip this check entirely (not recommended).

Run tests

.env files should not be packaged. Do not include the file in your package.json files property. To ignore this check, you can use --allow-package-env-file (not recommended).

Run tests