Eclipse CSI Codesign Tools

Tools for signing artifacts via the SignPath REST API:

• CLI (csi-codesign) — standalone native binary for signing in any CI/CD pipeline
• Maven Plugin (codesign-maven-plugin) — integrates signing into Maven builds
• Java API — integrates signing into Java application (used by both the CLI and the Maven Plugin)

Quick Start

CLI

Download the native binary for your platform from the Releases page and run:

csi-codesign sign app.exe \
  --organization-id <ORG_ID> \
  --project-id <PROJECT_SLUG> \
  --signing-policy <POLICY_SLUG> \
  --output app-signed.exe

Set CSI_CODESIGN_API_TOKEN for authentication.

Maven Plugin

Add the plugin to your pom.xml:

<plugin>
  <groupId>org.eclipse.csi</groupId>
  <artifactId>codesign-maven-plugin</artifactId>
  <version>VERSION</version>
</plugin>

Replace VERSION with the latest release from Maven Central.

For full installation, authentication, configuration, and troubleshooting documentation, see USAGE.md.

Contributing

See CONTRIBUTING.md for development setup, build instructions, and the release process.

License

Eclipse Public License - v 2.0