Hello i want a discuss a thing.
I actually have a very Hight level of security rules applied on my network/computer (Hardware and software), but it seem there is a hole in the transparency we can have a software engineer.
For instance, i have in my security policy explained how my hardware and software security during development and test of my extension are done and with whom software.
But the hole rely in the upload to the Microsoft Store of the code stored on GitHub, i want to know if actually or later is possible to deploy as an update to the partner center (where we upload these extension/software to Microsoft store) directly without having to pass by a zip on the computer, (and add a flags on the store page (or GitHub page) that is done).
I ask this to totally eliminate the reliance on trust that the developer has really uploaded the same version on the Store (minus the signature of file added by Microsoft) that the one on GitHub.
I actually know that some user/dev will not like that (like any security update (see windows 11 tpm enforcement to understand), but transparency and security is now something very important.
Hope to see constructive answer on how i can achieve that even if GitHub / Store don't propose it.
