Sign esbuild.exe with digital signature
Author: alexhassCreated Aug 27, 2026Updated Aug 27, 2026
For security reaons it becomes more and more important that we are safe on who created the executable and if we can trust him and we do not download a random file a highjacker has build and included some backdoors.
We are using Windows AppLocker and learned that esbuild.exe does not have a signature at all. In AppLocker you can define a signers certificate you trust combined with a product name that EXE provides. This allows us to whitelist esbuild to our developers.
Currently the esbuild does NOT sign and we have nothing to trust except the filename, what is higly insecure.
Please consider signing esbuild and maybe other executable with a digital signature.
Source: evanw/esbuild