Skip to content

Enable Electron Fuses and enforce code signing#2309

Merged
gregpriday merged 1 commit intomainfrom
feature/issue-2303-enable-electron-fuses-enforce
Feb 22, 2026
Merged

Enable Electron Fuses and enforce code signing#2309
gregpriday merged 1 commit intomainfrom
feature/issue-2303-enable-electron-fuses-enforce

Conversation

@gregpriday
Copy link
Copy Markdown
Collaborator

Summary

Implements foundational security measures for Electron app hardening by configuring Electron fuses and enforcing code signing for all macOS and Windows builds.

Closes #2303

Changes Made

  • Add @electron/fuses dependency for security hardening
  • Configure all V1 fuses in afterPack.cjs with production-ready settings
  • Enforce code signing for macOS and Windows builds (platform-specific)
  • Enable macOS certificate import and notarization in release workflow
  • Add Windows code signing credentials to CI/CD pipeline
  • Implement comprehensive afterPack tests with platform-specific coverage
  • Fix Linux binary path resolution to use executableName
  • Add explicit asar configuration and platform validation
  • Validate Electron binary existence before fuse flipping

- Add @electron/fuses dependency for security hardening
- Configure all V1 fuses in afterPack.cjs with production-ready settings
- Enforce code signing for macOS and Windows builds (platform-specific)
- Enable macOS certificate import and notarization in release workflow
- Add Windows code signing credentials to CI/CD pipeline
- Implement comprehensive afterPack tests with platform-specific coverage
- Fix Linux binary path resolution to use executableName
- Add explicit asar configuration and platform validation
- Validate Electron binary existence before fuse flipping
@gregpriday gregpriday merged commit d678890 into main Feb 22, 2026
2 of 3 checks passed
@gregpriday gregpriday deleted the feature/issue-2303-enable-electron-fuses-enforce branch February 22, 2026 04:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Enable Electron Fuses and enforce code signing

1 participant