[Upstream #57] The release package has a risk warning

[quangdang46]

Mirrored from upstream 1jehuang/jcode — Issue #57 by @s5unty
Original state: open
Created: 2026-04-24T08:59:02Z · Updated: 2026-04-26T01:13:00Z
This issue is an auto-mirrored copy. Comments and edits here are local to quangdang46/jcode — do not expect them to propagate upstream.

---

The macOS package is normal, but the Linux package is abnormal.

Chrome: 146.0.7680.177

[quangdang46]

Implementation Plan

Scope

"Release package has a risk warning" — likely refers to Windows SmartScreen or macOS Gatekeeper warnings on the unsigned binary.

Approaches

• Windows: code-sign the binary with an EV certificate (~$300/year).
• macOS: Apple Developer ID + notarization (~$99/year).
• Linux: package via deb/rpm with GPG signature.

Files

• .github/workflows/release.yml — add signing steps.
• Document required secrets: WINDOWS_SIGN_CERT, APPLE_DEV_ID.

Estimated scope: L — infra + ongoing cost. Not a code-only issue.