Skip to main content
WaveFlow
en

Code signing policy

How the Windows releases of the WaveFlow desktop player are signed, and who decides what gets signed.

Free code signing provided by SignPath.io, certificate by SignPath Foundation

Windows releases are currently self-signed; they will be signed through SignPath Foundation once the project is approved.

What is signed

Only the Windows releases of WaveFlow, the desktop player:

  • its installers, .exe and .msi;
  • the waveflow.exe program they install.

They are built by GitHub Actions from the source code of the public repository github.com/InstaZDLL/WaveFlow.

Team roles

Committers and reviewers
InstaZDLLChange the source code, and review every change before it is merged.
Approvers
InstaZDLLApprove each signing request before a release is signed.

Privacy

How WaveFlow and this site handle your data, and where to read what the player looks up online, feature by feature, is in the privacy policy.