Free code signing provided by SignPath.io, certificate by SignPath Foundation.
What is signed
The Windows installer (SSHPilot-<version>-windows-<arch>-setup.exe) attached to each GitHub release. GitHub Actions builds it from the source code in mfat/sshpilot, and SignPath verifies that the file it signs came from that build. An approver reviews and approves every release before it is signed.
Team roles
- Committers and reviewers: Mehdi (@mfat)
- Approvers: Mehdi (@mfat)
Changes from anyone else, such as pull requests, are reviewed by a committer before they are merged.
Privacy policy
See the SSH Pilot privacy policy. The installer shows it during setup.