Code signing policy Roxora Imager
Policy
This is the policy under which the Windows packages of Roxora Imager are signed. They are not signed yet: until they are, Windows warns the first time the installer runs, as the Roxora Imager page describes. From then on:
Free code signing provided by SignPath.io, certificate by SignPath Foundation.
What is signed
- Signed
- The Windows installer and the Windows program of Roxora Imager, as attached to the releases of roxora-os/imager.
- Built by
- The project’s own CI: the release workflow of roxora-os/imager on GitHub Actions, from the tagged source. Nothing built anywhere else is signed.
- Not signed
- Third-party components the app bundles, such as Electron, keep their own signatures or none. Roxora images are not signed by this certificate.
- Approval
- Every release is approved by hand before it is signed.
Roles
- Authors
- May change the source without a further review: Ga Hing Woo (gahingwoo).
- Reviewers
- Review every change from anyone else, such as a pull request: Ga Hing Woo (gahingwoo).
- Approvers
- Approve each signing request: Ga Hing Woo (gahingwoo).
- Until others join
- One person holds all three roles. People who join are listed here with their roles.
- Accounts
- Everyone in these roles uses multi-factor authentication for GitHub and for SignPath.
Privacy
What Roxora Imager fetches, from where, and how to turn its update check off is in the privacy policy. It sends no telemetry.