TrustCheck Package Scanner

Version updated for https://github.com/Halfblood-Prince/trustcheck to version v2.2.2.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

What’s Changed

Published from immutable commit 80ba32f691b15f39c26df081b8d7865ae7561750. The release workflow publishes PyPI, GitHub Action, Snap Store, Homebrew tap pins, and GHCR Docker distributions after shared tag verification, QA, matrix, and coverage builds.

Release artifacts:

  • dist/*
  • dist/SHA256SUMS.txt
  • dist/*.cdx.json
  • standalone trustcheck-*-windows-x86_64.exe with checksum
  • unsigned trustcheck-*-store.msix for Microsoft Store submission
  • GHCR Docker images for linux/amd64, linux/arm64, and linux/arm/v7

Verify the direct Windows executable before use:

Get-AuthenticodeSignature .\trustcheck-*-windows-x86_64.exe | Format-List
Get-FileHash .\trustcheck-*-windows-x86_64.exe -Algorithm SHA256

The Authenticode status must be Valid, include a timestamp certificate, and match the adjacent .sha256 file. The Store signs the MSIX during submission; the workflow tests its execution alias with a disposable certificate before upload.

GitHub Action:

  • Immutable: uses: Halfblood-Prince/trustcheck@v2.2.2
  • Compatible major: uses: Halfblood-Prince/trustcheck@v2

Full Changelog: https://github.com/Halfblood-Prince/trustcheck/compare/v2.2.1...v2.2.2