Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.
-
Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/analyticsdx-vscode-core/1.2.1/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.
-
From a terminal, run:
shasum -a 256 <location_of_the_downloaded_file> -
Confirm that the SHA in your output matches the value in this list of SHAs.
- 8464e024fc3693359d8cb720931ab78b1ee739531d7a67299fe76bce2df5d465 analyticsdx-vscode-core-1.2.1.vsix
- 23868eef13f6c9eacfb9ccc00355c73d032bdeed118acf86b7e4351ea7cd19ca analyticsdx-vscode-templates-1.2.1.vsix
- b393698fb7ea69a6398f251f96ca11272b047efba853dd90d8a95563f5404bdc analyticsdx-vscode-1.2.1.vsix
-
Change the filename extension for the file that you downloaded from .zip to .vsix.
-
In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.
-
Install the verified VSIX file.