Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.
-
Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/salesforcedx-vscode-core/45.9.0/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.
-
From a terminal, run:
shasum -a 256 <location_of_the_downloaded_file>
- Confirm that the SHA in your output matches the value in this list of SHAs.
7d7e0302a421d134cab72487163ef4bb6c9644887fef0225941b56e4d437c8de salesforcedx-vscode-apex-debugger-45.9.0.vsix 1ca003dfe320801ab6258258df778fa0bb75423dd275120022fcb3d9e0cc3c44 salesforcedx-vscode-apex-replay-debugger-45.9.0.vsix 27f3b983a0a78260261958aac5a0ec4d1babb461635fd9c9bffc033b0aeb41c7 salesforcedx-vscode-apex-45.9.0.vsix f242817391e1be202c195ade08b52e410eebaf4d5865d6a02dc32ed4f95278c9 salesforcedx-vscode-core-45.9.0.vsix cd31a1719f47f95baff62c5766444a220db931a180546f16e956f820c0826dbc salesforcedx-vscode-lightning-45.9.0.vsix 003604774accc8a7489387fe012bd068d805787a470c790bc92fe7b5a19fd298 salesforcedx-vscode-lwc-45.9.0.vsix 480abfb8d96344441a591b1f0575dd14659d7c1840acd8b30267a1d61e660266 salesforcedx-vscode-visualforce-45.9.0.vsix 56e610b9f61c55c7d3b77035cdd3b73ff7e0caa65680216335d5e0e8b1975d21 salesforcedx-vscode-45.9.0.vsix
-
Change the filename extension for the file that you downloaded from .zip to .vsix.
-
In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.
-
Install the verified VSIX file.