Properly sign the Windows executable

[Tbohunek]

Terraform Version

Terraform v1.10.4
on windows_amd64

Terraform Configuration Files

n/a

Debug Output

n/a

Expected Behavior

Terraform runs

Actual Behavior

Program terraform.exe failed to run: This program is blocked by group policy.

Steps to Reproduce

terraform -version

Additional Context

Our company recently switched to AppLocker, and the IT team say Terraform executable isn't signed properly.
They showed me the AppLocker rule for the Publisher string, everything looks good, but doesn't work.
They tell me it's because the other details in the file are empty:

For now the only thing that works is file hashes, which only work till next version. :)

References

Same problem with azurerm and azuread providers
hashicorp/terraform-provider-azurerm#26369

Generative AI / LLM assisted development?

No response

[crw]

Hi @Tbohunek, the artifact builds are handled by a build system within HashiCorp, which the core team does not have direct access to influence. I did a little digging and I think I found the correct tool to file this bug. I created an upstream issue which will only be visible to employees of HashiCorp: https://github.com/hashicorp/signore/issues/250. Thanks!