How a version is checked
The four checks DockCrate runs on every app version before it can reach a device.
Four checks
DockCrate by BufferSol puts four checks on every app version. Each version carries an inspection tag showing the result of each one, and the tag links to the QA log.
Hash
The installer is downloaded and its SHA-256 is recorded. The same hash is shown on the version label, so you can compare it with the vendor's published value.
Signer
The code signing certificate is read and compared with the signer of earlier versions. A new or changed signer holds the release for manual review.
Scan
The installer is scanned for malware in an isolated sandbox, and a scanner signature database older than 24 hours holds the version. A hit holds the version. The in-house scanner is being commissioned: until it reports on a version, that version does not pass this check and cannot publish. No single scanner catches everything, which is why the Pilot ring exists.
VM
The VM check installs, detects and uninstalls the app in a clean Windows VM. Until the Windows test lab is live, this check shows as pending. We never show a VM pass for a test that did not run.
After the checks
A version that passes goes to Pilot first. Broad follows after the delay, and auto pause stops it if Pilot failures reach the threshold. Rollback is available to the last 3 versions.