https://github.com/jetbrains/marketplace-zip-signer

Marketplace ZIP Signer tool handles signing and verification of the JetBrains plugins.
https://github.com/jetbrains/marketplace-zip-signer

intellij intellij-idea intellij-idea-plugin intellij-platform intellij-plugin intellij-plugins jetbrains-plugin

Last synced: about 4 hours ago
JSON representation

Marketplace ZIP Signer tool handles signing and verification of the JetBrains plugins.

• Host: GitHub
• URL: https://github.com/jetbrains/marketplace-zip-signer
• Owner: JetBrains
• License: apache-2.0
• Created: 2020-02-10T14:24:40.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2024-12-02T10:08:25.000Z (2 months ago)
• Last Synced: 2025-01-30T02:01:37.739Z (6 days ago)
• Topics: intellij, intellij-idea, intellij-idea-plugin, intellij-platform, intellij-plugin, intellij-plugins, jetbrains-plugin
• Language: Kotlin
• Homepage:
• Size: 331 KB
• Stars: 17
• Watchers: 14
• Forks: 14
• Open Issues: 13
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md

Awesome Lists containing this project

README

        
# Marketplace zip signer

[![official JetBrains project](https://jb.gg/badges/official.svg)][jb:confluence-on-gh]

[![Build](https://github.com/JetBrains/marketplace-zip-signer/workflows/Build/badge.svg)][gh:build]

[![Slack](https://img.shields.io/badge/Slack-%23intellij--platform-blue)][jb:slack]

Main goal of marketplace zip signer is to sign and verify 

JetBrains plugins, but it can be applied to any other zip archive. 

General concept of used zip archive signature scheme is similar 

to [APK Signature Scheme V2](https://source.android.com/security/apksigning/v2)

## Signer lib

Library is a main part of project. It is located under 

[lib](https://github.com/JetBrains/marketplace-zip-signer/tree/master/lib) directory.

If you want to sign plugin programmatically using lib use [ZipSigner](https://github.com/JetBrains/marketplace-zip-signer/blob/master/lib/src/main/kotlin/org/jetbrains/zip/signer/signing/ZipSigner.kt), 

to verify use [ZipVerifier](https://github.com/JetBrains/marketplace-zip-signer/blob/master/lib/src/main/kotlin/org/jetbrains/zip/signer/verifier/ZipVerifier.kt) 

## Command line interface

If you want to sign/verify plugin from command line you can use [CLI tool](https://github.com/JetBrains/marketplace-zip-signer/tree/master/cli).

List of available parameters can be found at [ZipSigningTool.SigningOptions](https://github.com/JetBrains/marketplace-zip-signer/blob/master/cli/src/main/kotlin/org/jetbrains/zip/signer/ZipSigningTool.kt)

[gh:build]: https://github.com/JetBrains/marketplace-zip-signer/actions?query=workflow%3ABuild

[jb:confluence-on-gh]: https://confluence.jetbrains.com/display/ALL/JetBrains+on+GitHub

[jb:slack]: https://plugins.jetbrains.com/slack

## How to use

Download the latest version from [maven repository](https://mvnrepository.com/artifact/org.jetbrains/marketplace-zip-signer).

```kotlin

repositories {

  mavenCentral()

}

dependencies {

  implementation("org.jetbrains:marketplace-zip-signer:0.1.8")

}

```