Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.
-
Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/salesforcedx-vscode-core/45.3.0/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.
-
From a terminal, run:
shasum -a 256 <location_of_the_downloaded_file>
- Confirm that the SHA in your output matches the value in this list of SHAs.
0e89fca650f1f491fe974b7d21f8e529b3d2e4f568842c41e9612308455dc6b4 salesforcedx-vscode-apex-debugger-45.3.0.vsix 763163c0209a738448e071a4453965b98b460432dcf7ba1814d0e16aebf753da salesforcedx-vscode-apex-replay-debugger-45.3.0.vsix 2b8b2e281a8b77bd8661784d10d30923d6d5f235f08db1ced47ad76399fd35b6 salesforcedx-vscode-apex-45.3.0.vsix 3bfadc8d637a0130b5d6910915a79addb02e78edcfec0c525cf3e46582314495 salesforcedx-vscode-core-45.3.0.vsix a6051784d78adf31b407955cefacdfe4dd11a02267a3b219a065c65f525be7b7 salesforcedx-vscode-lightning-45.3.0.vsix c3e7afe45d24e7f2a1c9eadc8775cd2b2a8dd5ce059e8311de233037afd907b3 salesforcedx-vscode-lwc-45.3.0.vsix f4e45d1aa7e38f41712fa82f1ae1bc8734f80570f9190ce62ff2dc08e9893aee salesforcedx-vscode-visualforce-45.3.0.vsix 48976c6c70c54a0cacaa2f4bd89c4fa3150db35828439c3c141f2bbc596d7666 salesforcedx-vscode-45.3.0.vsix
-
Change the filename extension for the file that you downloaded from .zip to .vsix.
-
In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.
-
Install the verified VSIX file.