Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.
-
Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/salesforcedx-vscode-core/43.19.0/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.
-
From a terminal, run:
shasum -a 256 <location_of_the_downloaded_file>
- Confirm that the SHA in your output matches the value in this list of SHAs.
2865a3ac511c825bf6c3d7ae442c16ebc31d240376ad516b4c8b6f023931d9af salesforcedx-vscode-apex-debugger-43.19.0.vsix 77ae34c7fec27afde2c965ece0a52b60fa4d705022a8308f774df910f12cd51f salesforcedx-vscode-apex-replay-debugger-43.19.0.vsix 6b74eb4ca8ca19c89b9e00cf3132c6b813952491c77e055509e10ed445fbe870 salesforcedx-vscode-apex-43.19.0.vsix 9869a41c40af1587b71a701b04083c9f1540087ffa6bd92c7c4fb6830a11195c salesforcedx-vscode-core-43.19.0.vsix b4a73e4523fdb0439008a6716542f91f8224a0b43d9f6fd5fd3a9065af62c0c3 salesforcedx-vscode-lightning-43.19.0.vsix d6dfec28ae054870631c3a0c4230c401db27692f27e09604fd7d218f561257cb salesforcedx-vscode-lwc-43.19.0.vsix e7091df628f4aebeffb1323e0a8a76a0934aecb7af7747f34d2382dd9dfdf7c2 salesforcedx-vscode-visualforce-43.19.0.vsix 004a0ae9305d9de530352515c8304435d5fb53c8f310dd938343d17839408a16 salesforcedx-vscode-43.19.0.vsix
-
Change the filename extension for the file that you downloaded from .zip to .vsix.
-
In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.
-
Install the verified VSIX file.