Skip to content

Latest commit

 

History

History
25 lines (19 loc) · 1.23 KB

SHA256.md

File metadata and controls

25 lines (19 loc) · 1.23 KB
Raw

Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.

  1. Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/salesforcedx-vscode-core/57.15.0/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.

  2. From a terminal, run:

shasum -a 256 <location_of_the_downloaded_file>

  1. Confirm that the SHA in your output matches the value in this list of SHAs. 9fd5830fd646e931d9b7156f97c15872e3739b0d5bfe3085fb65128b6829b3f4 ./extensions/sfdx-code-analyzer-vscode-1.3.0.vsix

  2. Change the filename extension for the file that you downloaded from .zip to .vsix.

  3. In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.

  4. Install the verified VSIX file.