https://github.com/vegardit/docker-osslsigncode

Docker image for signing Windows binaries with Microsoft Authenticode using osslsigncode
https://github.com/vegardit/docker-osslsigncode

authenticode docker-image osslsigncode

Last synced: 4 months ago
JSON representation

Docker image for signing Windows binaries with Microsoft Authenticode using osslsigncode

• Host: GitHub
• URL: https://github.com/vegardit/docker-osslsigncode
• Owner: vegardit
• License: apache-2.0
• Created: 2021-07-19T20:21:21.000Z (almost 5 years ago)
• Default Branch: main
• Last Pushed: 2025-12-15T19:30:23.000Z (6 months ago)
• Last Synced: 2025-12-19T03:13:56.871Z (6 months ago)
• Topics: authenticode, docker-image, osslsigncode
• Language: Shell
• Homepage:
• Size: 50.8 KB
• Stars: 7
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE.txt
  • Code of conduct: CODE_OF_CONDUCT.md

Awesome Lists containing this project

README

          
# vegardit/docker-osslsigncode 

[![Build Status](https://github.com/vegardit/docker-osslsigncode/workflows/Build/badge.svg "GitHub Actions")](https://github.com/vegardit/docker-osslsigncode/actions?query=workflow%3ABuild)

[![License](https://img.shields.io/github/license/vegardit/docker-osslsigncode.svg?label=license)](#license)

[![Docker Pulls](https://img.shields.io/docker/pulls/vegardit/osslsigncode.svg)](https://hub.docker.com/r/vegardit/osslsigncode)

[![Docker Stars](https://img.shields.io/docker/stars/vegardit/osslsigncode.svg)](https://hub.docker.com/r/vegardit/osslsigncode)

[![Contributor Covenant](https://img.shields.io/badge/Contributor%20Covenant-v2.1%20adopted-ff69b4.svg)](CODE_OF_CONDUCT.md)

1. [What is it?](#what-is-it)

1. [Docker image tagging scheme](#tags)

1. [Usage](#usage)

1. [License](#license)

## What is it?

A multi-arch Docker image for signing Windows binaries with [Microsoft Authenticode](https://docs.microsoft.com/en-us/windows-hardware/drivers/install/authenticode) using [osslsigncode](https://github.com/mtrojnar/osslsigncode).

Automatically rebuilt **weekly** to include the latest OS security fixes.

## Docker image tagging scheme

| Tag                            | Description                                                                                | Base Docker Image

|--------------------------------|--------------------------------------------------------------------------------------------|------------------

|`:latest`
`:latest-alpine`   | build of the latest available [release](https://github.com/mtrojnar/osslsigncode/releases) | alpine:3

|`:latest-debian`                | build of the latest available [release](https://github.com/mtrojnar/osslsigncode/releases) | debian:stable-slim

|`:develop`
`:develop-alpine` | build of the development [branch](https://github.com/mtrojnar/osslsigncode)                | alpine:3

|`:develop-debian`               | build of the development [branch](https://github.com/mtrojnar/osslsigncode)                | debian:stable-slim

|`:2.x`
`:2.x-alpine`         | build of the latest minor version of the respective
major release, e.g. `2.x` may contain release `2.9` | alpine:3

|`:2.x-debian`                   | build of the latest minor version of the respective
major release, e.g. `2.x` may contain release `2.9` | debian:stable-slim

See all tags at https://hub.docker.com/r/vegardit/osslsigncode/tags

## Usage

The docker image is configured to use `/work` as work directory.

You can mount the folder with the executables to sign into the `/work` directory and then use relative paths

for `--in` and `--out` parameters of osslsigncode.

For example:

```bash

docker run --rm -v $PWD:/work vegardit/osslsigncode sign \

  -certs mycert.crt -key mykey.der \

  -n 'My Application' -i https://www.mywebsite.com/ \

  -in myapp.exe -out myapp-signed.exe

```

## License

All files in this repository are released under the [Apache License 2.0](LICENSE.txt).

Individual files contain the following tag instead of the full license text:

```

SPDX-License-Identifier: Apache-2.0

```

This enables machine processing of license information based on the SPDX License Identifiers that are available here: https://spdx.org/licenses/.