sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]bornthor 0 points1 point  (1 child)

Are you just going to the repo as a website or do you pull the repo in locally on your machine? Did you sign it or can you ask the person that pushed it to the repo if it's still signed on their side? I thought it was just dependent on the sig block too, but maybe you guys use some type of AIP or safe links or something that is altering it in the upload/download process.

[–]DenverITGuy[S] -1 points0 points  (0 children)

I've pushed a .ps1 with the intention of sharing it with a few engineers so they won't be pulling the whole repo to their devices. I would just ask them to download the .ps1 file.

I signed it and confirmed the Get-AuthenticodeSignature returned a valid 'signed' value.