msgraph-sdk-powershell icon indicating copy to clipboard operation
msgraph-sdk-powershell copied to clipboard

Microsoft Graph Powershell SDK Package is not signed

Open g2mula opened this issue 1 year ago • 0 comments

Describe the bug

I am trying to use Microsoft Graph Powershell SDK in a production environment This causes a Sev2 to be raised due to unsigned binaries.

[- AzSysLock Alert -] [- CI -] The ‘\Device\HarddiskVolume3\Users\TheUser.MachineName\Documents\WindowsPowerShell\Modules\Microsoft.Graph.Authentication\2.18.0\Dependencies\Desktop\Newtonsoft.Json.dll’ binary file / script violated code sign policy but was not blocked (audited only)

https://portal.microsofticm.com/imp/v3/incidents/incident/498622566/summary

Expected behavior

Installation should complete without raising any Sev2

How to reproduce

Install-Module Microsoft.Graph

SDK Version

2.18.0

Latest version known to work for scenario above?

No response

Known Workarounds

None

Debug output

Click to expand log ```
</details>


### Configuration

_No response_

### Other information

_No response_

g2mula avatar May 14 '24 16:05 g2mula