Skip to content

docs: SignPath コード署名ポリシーと申請中の記載を追加 #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
maktak-105 merged 1 commit into from
Sep 23, 2026
Merged

docs: SignPath コード署名ポリシーと申請中の記載を追加 #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ The GUI and documentation support English and Japanese; the QDB-style language b

## Using the binary release

Code signing: Free code signing provided by [SignPath.io](https://signpath.io), certificate by [SignPath Foundation](https://signpath.org). The application is under review; releases published after approval will be signed. See [Code signing policy](docs/code_signing_policy.md).

If you only want to run the app, download the ZIP from GitHub Releases. GitHub Actions builds `QuickFileCopy-binary.zip` on a `v*` tag; the ZIP is not stored in this repository.

- [Latest releases](https://github.com/maktak-105/QuickFileCopy/releases)
Expand Down
2 changes: 2 additions & 0 deletions README_jp.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ GUIと文書は日本語／Englishに対応し、QDB形式の言語ボタンで

## 配布版を使う

コード署名: [SignPath.io](https://signpath.io) による無償のコード署名を利用し、証明書は [SignPath Foundation](https://signpath.org) が発行します。現在申請中で、承認後に公開するリリースから署名されます。詳細は [コード署名ポリシー](docs/code_signing_policy.md)。

実行だけなら GitHub Releases の ZIP を使います。`v*` タグで GitHub Actions が `QuickFileCopy-binary.zip` を作ります。ZIP はリポジトリには置きません。

- [最新版の配布ページ](https://github.com/maktak-105/QuickFileCopy/releases)
Expand Down
22 changes: 22 additions & 0 deletions docs/code_signing_policy.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
# Code signing policy

Free code signing provided by [SignPath.io](https://signpath.io), certificate by [SignPath Foundation](https://signpath.org).

Status: the application to SignPath Foundation is under review. Releases published before approval are not signed.

## What is signed

- Only Windows executables built from the source code in this repository by the GitHub Actions release workflow (`.github/workflows/release.yml`) and published on [GitHub Releases](https://github.com/maktak-105/QuickFileCopy/releases).
- Third-party binaries shipped in the package (for example `WebView2Loader.dll` or runtime libraries) are not built by this project and are not signed by it.
- Every signing request is approved manually by an approver.

## Team roles

- Committers and reviewers: [maktak-105](https://github.com/maktak-105)
- Approvers: [maktak-105](https://github.com/maktak-105)

All team members use multi-factor authentication for GitHub and SignPath.

## Privacy policy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it.
Loading