disable extension validation in Positron

src/vs/platform/extensionManagement/node/extensionManagementService.ts

@@ -348,6 +348,13 @@ export class ExtensionManagementService extends AbstractExtensionManagementServi
 			const value = this.configurationService.getValue('extensions.verifySignature');
 			verifySignature = isBoolean(value) ? value : true;
 		}
+
+		// --- Start Positron ---
+		// Disable signature verification for Positron; we don't ship the
+		// `vsce-sign` tool used to validate signatues.
+		verifySignature = false;
+		// --- End Positron ---
+
 		const { location, verificationStatus } = await this.extensionsDownloader.download(extension, operation, verifySignature, clientTargetPlatform);
 
 		if (verificationStatus !== ExtensionSignatureVerificationCode.Success && verifySignature && this.environmentService.isBuilt && !isLinux) {

src/vs/workbench/contrib/extensions/browser/extensions.contribution.ts

@@ -258,7 +258,11 @@ Registry.as<IConfigurationRegistry>(ConfigurationExtensions.Configuration)
 				description: localize('extensions.verifySignature', "When enabled, extensions are verified to be signed before getting installed."),
 				default: true,
 				scope: ConfigurationScope.APPLICATION,
-				included: isNative && !isLinux
+				// --- Start Positron ---
+				// Do not include this setting in Positron; it is not
+				// supported.
+				included: isNative && !isLinux && false
+				// --- End Positron ---
 			}
 		}
 	});