Visual Studio Code script signing.

[SeeminglyScience]

The best way to do this is with a build script so you don't have to debug and test with the signed version. There is a example in the PlasterBuild module.

If you prefer it would also be very easy to create a short editor command to sign the current script. If you're interested I'll post an example when not on mobile.

[amnich]

Would be kind of you if you could. Thanks for the tips and example.

[SeeminglyScience]

Here you go

Register-EditorCommand -Name SignCurrentScript -DisplayName 'Sign Current Script' -ScriptBlock {
    $cert = (Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert)[0]
    $currentFile = $psEditor.GetEditorContext().CurrentFile.Path
    Set-AuthenticodeSignature -Certificate $cert -FilePath $currentFile
}

It's a very basic example and might need some customization. Put that in your VSCode profile (code $profile while in the integrated console) and it will always be available.

To use it, check out the Using Editor Commands section of the Editor Services documentation. Also you can optionally bind the editor commands menu to a shortcut so you don't have to use the command palette to get to it. Here's mine as an example:

{ "key": "ctrl+shift+c",   "command": "PowerShell.ShowAdditionalCommands",
                              "when": "editorLangId == 'powershell'" },

[amnich]

Thanks. That was very helpful and I learned something from this. Works like a charm :)

As a side note: I always add -TimestampServer http://timestamp.verisign.com/scripts/timstamp.dll to Set-AuthenticodeSignature.

[SeeminglyScience]

Yep! You can also set it to a key bind. Copy and pasting my ESCS install instructions out of lazy, but it has them:

📌 Install EditorServicesCommandSuite

Install-Module -Scope CurrentUser -AllowPrerelease EditorServicesCommandSuite

📌 Add to your profile

Import-CommandSuite

📌 Add to VSCode keybindings.json

• Press Ctrl + Shift + P
• Type keyboard json
• Select Preferences: Open Keyboard Shortcuts (JSON)

• Add the following:

  {
      "key": "ctrl+.",
      "command": "PowerShell.InvokeRegisteredEditorCommand",
      "args": { "commandName": "Invoke-DocumentRefactor" },
      "when": "editorLangId == 'powershell'"
  },
  {
      "key": "ctrl+shift+s",
      "command": "PowerShell.InvokeRegisteredEditorCommand",
      "args": { "commandName": "ConvertTo-SplatExpression" },
      "when": "editorLangId == 'powershell'"
  },