TrustCheck Package Scanner

Version updated for https://github.com/Halfblood-Prince/trustcheck to version v2.1.2.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

What’s Changed

Published from immutable commit e6660a53c73391a10e8e721e3a245b25e3289b4b. The release workflow publishes PyPI, GitHub Action, Snap Store, and GHCR Docker distributions after shared tag verification, QA, matrix, and coverage builds.

Release artifacts:

  • dist/*
  • dist/SHA256SUMS.txt
  • dist/*.cdx.json
  • standalone trustcheck-*-windows-x86_64.exe with checksum
  • unsigned trustcheck-*-store.msix for Microsoft Store submission
  • GHCR Docker images for linux/amd64, linux/arm64, and linux/arm/v7

Verify the direct Windows executable before use:

Get-AuthenticodeSignature .\trustcheck-*-windows-x86_64.exe | Format-List
Get-FileHash .\trustcheck-*-windows-x86_64.exe -Algorithm SHA256

The Authenticode status must be Valid, include a timestamp certificate, and match the adjacent .sha256 file. The Store signs the MSIX during submission; the workflow tests its execution alias with a disposable certificate before upload.

GitHub Action:

  • Immutable: uses: Halfblood-Prince/trustcheck@v2.1.2
  • Compatible major: uses: Halfblood-Prince/trustcheck@v2

Full Changelog: https://github.com/Halfblood-Prince/trustcheck/compare/v2.1.1...v2.1.2