Skip to content

VectorXR v0.16.1

Choose a tag to compare

View all tags
@mdiener87 mdiener87 released this 12 Aug 04:17
· 11 commits to master since this release
Immutable release. Only release title and notes can be modified.
v0.16.1
7478699
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Signed Windows Releases

Adds verified DienerTech code signatures to VectorXR's Windows application, OpenXR layer, and installer.

Changes

  • Verified Windows publisher
    • Signs the VectorXR configuration application and OpenXR API layer DLL as DienerTech LLC using Azure Artifact Signing.
    • Signs the final NSIS installer after it contains the signed application and layer payload.
    • Applies RFC 3161 timestamps so Windows can continue validating each signature after its short-lived signing certificate rotates.
  • Protected release pipeline
    • Uses passwordless GitHub workload identity federation, keeping private signing keys and reusable Azure credentials out of the repository.
    • Restricts signing authority to the VectorXR certificate profile and release environment.
    • Verifies every Authenticode signature before generating checksums or publishing release assets, and rejects release tags outside the master branch history.
Assets 5
Loading