Currently, Visual Studio Code extensions are not signed or verified on the Microsoft Visual Studio Code Marketplace. Salesforce provides the Secure Hash Algorithm (SHA) of each extension that we publish. To verify the extensions, make sure that their SHA values match the values in the list below.
-
Instead of installing the Visual Code Extension directly from within Visual Studio Code, download the VS Code extension that you want to check by following the instructions at https://code.visualstudio.com/docs/editor/extension-gallery#_common-questions. For example, download, https://salesforce.gallery.vsassets.io/_apis/public/gallery/publisher/salesforce/extension/salesforcedx-vscode-core/49.5.0/assetbyname/Microsoft.VisualStudio.Services.VSIXPackage.
-
From a terminal, run:
shasum -a 256 <location_of_the_downloaded_file>
- Confirm that the SHA in your output matches the value in this list of SHAs.
d74a35a68e097efd64ecf1e56f0b8f4a77c9cfba689dfcfe7190eb3adbcf5c5a salesforcedx-vscode-apex-debugger-49.5.0.vsix 4ae32874242a5f47ed7f3c499ecb5c620268b81c8451ec2900fddf90ba1d3361 salesforcedx-vscode-apex-replay-debugger-49.5.0.vsix fa0897ee576db12db15dd785d15fd51d8abf139d57e87ec636eff23ce105ba8d salesforcedx-vscode-apex-49.5.0.vsix c076becfe913a5d8e14e8ad069b78c6d92889a949788e62a457ef53205cda17a salesforcedx-vscode-core-49.5.0.vsix dba30367c4c24d9ac837e7ad388bbbdb28fe11d50a11e07c8e78cc3406810633 salesforcedx-vscode-lightning-49.5.0.vsix 48ec60c03bed9b738ae19d10373cd73818f2b240eaf00f9e2de7aeea5e0f81c5 salesforcedx-vscode-lwc-49.5.0.vsix b639379283250875e78ecedb6684dd81509c1c9a609730100c99d6113e8fcd06 salesforcedx-vscode-visualforce-49.5.0.vsix daf3568eec81f004efab674514745f8a639fa1541cde68720d2e0ccfaccbedf6 salesforcedx-vscode-49.5.0.vsix
-
Change the filename extension for the file that you downloaded from .zip to .vsix.
-
In Visual Studio Code, from the Extensions view, select ... > Install from VSIX.
-
Install the verified VSIX file.