salesforcedx-vscode/SHA256.md

Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.

1. Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/salesforcedx-vscode-core/41.17.0/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.

2. From a terminal, run:

shasum -a 256 <location_of_the_downloaded_file>

3. Confirm that the SHA in your output matches the value in this list of SHAs.

94150c3ecb2155754797b8063941b5a07a1a562ee538ae3e7fb683ec50f3aae2 salesforcedx-vscode-apex-debugger-41.17.0.vsix e999b2a8d47c88e0b20f64e4cb4a20904164622e316fd483dba077d3096f9a08 salesforcedx-vscode-apex-41.17.0.vsix ec6770dce039e728e953be861da4009fc0fa2cf5962aa28353b41973a5b850cd salesforcedx-vscode-core-41.17.0.vsix 449400276f00371cae5f6698d94579e8669d640d693f9454ea8396e03defb1fa salesforcedx-vscode-lightning-41.17.0.vsix 416c3db06498ce71cfb4a6571e7c35c3a38af0b6dcd7e02d519cda0f57d58ee9 salesforcedx-vscode-visualforce-41.17.0.vsix 8fe745c79fe6d6daa8d2bd61eca5f33b8933e14c1c6317500a93a741f5c00be8 salesforcedx-vscode-41.17.0.vsix

4. Change the filename extension for the file that you downloaded from .zip to .vsix.

5. In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.

6. Install the verified VSIX file.