What is signed
Signing starts with the first Windows release after SignPath Foundation issues our certificate. Until then, the Windows downloads are unsigned.
From that release on, the Windows installer of the OpenChamber desktop app, the OpenChamber.exe it
installs and its uninstaller are signed with the publisher name SignPath Foundation. GitHub Actions builds them from the source code
in openchamber/openchamber,
and SignPath checks that every file it signs comes from such a build.
The installer also carries programs from other open source projects: the OpenCode CLI, ripgrep, Electron's libraries and the terminal helpers of node-pty. We did not build them, so they are not signed with this certificate.
Team roles
- Committers and reviewers: Bohdan Triapitsyn and Iuliia Ivashko. Every change from anyone else is reviewed by one of them before it is merged.
- Approvers: Bohdan Triapitsyn and Iuliia Ivashko. Each signing request waits until one of them approves it in SignPath.
Privacy
The app sends data only as described in the privacy policy.