diff --git a/src/vs/platform/extensionManagement/node/extensionManagementService.ts b/src/vs/platform/extensionManagement/node/extensionManagementService.ts index 680e0dd15be..37e1582acd5 100644 --- a/src/vs/platform/extensionManagement/node/extensionManagementService.ts +++ b/src/vs/platform/extensionManagement/node/extensionManagementService.ts @@ -348,6 +348,13 @@ export class ExtensionManagementService extends AbstractExtensionManagementServi const value = this.configurationService.getValue('extensions.verifySignature'); verifySignature = isBoolean(value) ? value : true; } + + // --- Start Positron --- + // Disable signature verification for Positron; we don't ship the + // `vsce-sign` tool used to validate signatues. + verifySignature = false; + // --- End Positron --- + const { location, verificationStatus } = await this.extensionsDownloader.download(extension, operation, verifySignature, clientTargetPlatform); if (verificationStatus !== ExtensionSignatureVerificationCode.Success && verifySignature && this.environmentService.isBuilt && !isLinux) { diff --git a/src/vs/workbench/contrib/extensions/browser/extensions.contribution.ts b/src/vs/workbench/contrib/extensions/browser/extensions.contribution.ts index f4d62c70da1..b30ca0bc936 100644 --- a/src/vs/workbench/contrib/extensions/browser/extensions.contribution.ts +++ b/src/vs/workbench/contrib/extensions/browser/extensions.contribution.ts @@ -258,7 +258,11 @@ Registry.as(ConfigurationExtensions.Configuration) description: localize('extensions.verifySignature', "When enabled, extensions are verified to be signed before getting installed."), default: true, scope: ConfigurationScope.APPLICATION, - included: isNative && !isLinux + // --- Start Positron --- + // Do not include this setting in Positron; it is not + // supported. + included: isNative && !isLinux && false + // --- End Positron --- } } });