Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature Request: Function to identify RuntimePackages #3771

Open
joandrsn opened this issue Nov 28, 2024 · 1 comment
Open

Feature Request: Function to identify RuntimePackages #3771

joandrsn opened this issue Nov 28, 2024 · 1 comment

Comments

@joandrsn
Copy link

joandrsn commented Nov 28, 2024

Would it be possible to add a function to identify which packagetype an AppFile is?

Example:
I have a file MyApp.app, but I dont know if it can be submitted to AppSource. AppSource packages cannot be RuntimePackages.

I propose a function to identify what type of apppackage it is.

I believe this can be done via reading the first 50 bytes of any given app file and identifying patterns in the file.

The usage for this function is for New-AppSourceSubmission, which requires a regular AL-package.

Another solution to the problem would be to add the functionality to altool.exe, such that the information would be present when calling Get-AppJsonFromAppFile.

If this is accepted, I will provide a pull-request with the functionality.

@rdebath
Copy link

rdebath commented Dec 10, 2024

Just to be pedantic an appsource submission file also contains source code and must be digitally signed.

eg: The first four bytes of this sort of file say NAVX, it must be a valid ZIP file (the PK\3\4 at offset 40), the zip file must contain source (At least six files in the zip?) and there must be a digital signature (Hmm, NXSB at end ?).

000000 4e 41 56 58 28 00 00 00 02 00 00 00 0b 58 e0 35  >NAVX(........X.5<
000010 60 a2 a9 4d 82 27 06 f7 36 ee b9 f0 ce 0a 00 00  >`..M.'..6.......<
000020 00 00 00 00 4e 41 56 58 50 4b 03 04 14 00 00 00  >....NAVXPK......<
000030

Why digitally signed? I'd make bet Microsoft don't check it, and they're the only ones who can.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants