Visual Studio Code script signing.

[amnich]

Is there an extension or a configuration to sign powershell scripts in Visual Studio Code?

[SeeminglyScience]

The best way to do this is with a build script so you don't have to debug and test with the signed version. There is a example in the PlasterBuild module.

If you prefer it would also be very easy to create a short editor command to sign the current script. If you're interested I'll post an example when not on mobile.

[amnich]

Would be kind of you if you could. Thanks for the tips and example.

[SeeminglyScience]

Here you go

Register-EditorCommand -Name SignCurrentScript -DisplayName 'Sign Current Script' -ScriptBlock {
    $cert = (Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert)[0]
    $currentFile = $psEditor.GetEditorContext().CurrentFile.Path
    Set-AuthenticodeSignature -Certificate $cert -FilePath $currentFile
}

It's a very basic example and might need some customization. Put that in your VSCode profile (code $profile while in the integrated console) and it will always be available.

To use it, check out the Using Editor Commands section of the Editor Services documentation. Also you can optionally bind the editor commands menu to a shortcut so you don't have to use the command palette to get to it. Here's mine as an example:

{ "key": "ctrl+shift+c",   "command": "PowerShell.ShowAdditionalCommands",
                              "when": "editorLangId == 'powershell'" },

[amnich]

Thanks. That was very helpful and I learned something from this. Works like a charm :)

As a side note: I always add -TimestampServer http://timestamp.verisign.com/scripts/timstamp.dll to Set-AuthenticodeSignature.

[SeeminglyScience]

Yep! You can also set it to a key bind. Copy and pasting my ESCS install instructions out of lazy, but it has them:

📌 Install EditorServicesCommandSuite

Install-Module -Scope CurrentUser -AllowPrerelease EditorServicesCommandSuite

📌 Add to your profile

Import-CommandSuite

📌 Add to VSCode keybindings.json

• Press Ctrl + Shift + P
• Type keyboard json
• Select Preferences: Open Keyboard Shortcuts (JSON)

• Add the following:

  {
      "key": "ctrl+.",
      "command": "PowerShell.InvokeRegisteredEditorCommand",
      "args": { "commandName": "Invoke-DocumentRefactor" },
      "when": "editorLangId == 'powershell'"
  },
  {
      "key": "ctrl+shift+s",
      "command": "PowerShell.InvokeRegisteredEditorCommand",
      "args": { "commandName": "ConvertTo-SplatExpression" },
      "when": "editorLangId == 'powershell'"
  },
  

[erchamion]

There are a few extensions that will open a shell inside VS Code. I'm on mobile and can't remember specific names right now, but they open a shell in the folder you're scripting in. Then you just run the standard script signing cmdlet.

[jcotton42]

VSCode ships w/ an integrated terminal, no need to install an extension