PowerToys/.pipelines/versionAndSignCheck.ps1

[CmdletBinding()]
# todo: send in arch / conf, could send in actual path
Param(
  [Parameter(Mandatory=$True,Position=1)]
  [AllowEmptyString()]
  [string]$targetDir = $PSScriptRoot + '/../extractedMsi/File'
)

$DirPath = $targetDir;  #this file is in pipeline, we need root.
$items = Get-ChildItem -Path $DirPath -File -Include *.exe,*.dll,*.ttf,PTCustomActions -Recurse -Force -ErrorAction SilentlyContinue
$totalFailure = 0;

Write-Host $DirPath;

if(-not (Test-Path $DirPath))
{  
    Write-Host "Folder does not exist!"
}

Write-Host "Total items: " $items.Count

if($items.Count -eq 0)
{
	# no items means something bad happened.  We should fail ASAP
	exit 1;
}

$items | ForEach-Object {
    if($_.VersionInfo.FileVersion -eq "1.0.0.0" )
	{
		# These items are exceptions that actually have the 1.0.0.0 version.
		if ((-not $_.Name.EndsWith("Microsoft.Windows.ApplicationModel.DynamicDependency.Projection.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Windows.ApplicationModel.Resources.Projection.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Windows.ApplicationModel.WindowsAppRuntime.Projection.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Windows.AppLifecycle.Projection.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Windows.System.Power.Projection.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.WindowsAppRuntime.Bootstrap.Net.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Xaml.Interactions.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Xaml.Interactivity.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.WindowsAppRuntime.Release.Net.dll"))
		)
		{
			Write-Host "Version set to 1.0.0.0: " + $_.FullName
			$totalFailure++;
		}
	}
}

$items | ForEach-Object {
    if($_.VersionInfo.FileVersion -eq $null )
	{
		# These items are exceptions that actually a version not set.
		if ((-not $_.Name.EndsWith("codicon.ttf")) -and
			(-not $_.Name.EndsWith("e_sqlite3.dll")) -and
			(-not $_.Name.EndsWith("vcamp140_app.dll")) -and
			(-not $_.Name.EndsWith("marshal.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.UI.Composition.OSSupport.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.UI.Xaml.Internal.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.Windows.ApplicationModel.Resources.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.WindowsAppRuntime.dll")) -and
			(-not $_.Name.EndsWith("Microsoft.WindowsAppRuntime.Bootstrap.dll")) -and
			(-not $_.Name.EndsWith("MRM.dll")) -and
			(-not $_.Name.EndsWith("PushNotificationsLongRunningTask.ProxyStub.dll")) -and
			(-not $_.Name.EndsWith("WindowsAppSdk.AppxDeploymentExtensions.Desktop.dll"))
		)
		{
			Write-Host "Version not set: " + $_.FullName
			$totalFailure++;
		}
	}
}

$items | ForEach-Object { 
	$auth = Get-AuthenticodeSignature $_.FullName
	if($auth.SignerCertificate -eq $null)
	{
		Write-Host "Not Signed: " + $_.FullName
		$totalFailure++;
	}
}

if($totalFailure -gt 0)
{
	exit 1
}

exit 0