Add .whitesource configuration file

.editorconfig

@@ -2,8 +2,7 @@
 root = true
 
 [*]
+trim_trailing_whitespace = true
+insert_final_newline = true
 # Must use a BOM else Unicode strings will not display
 charset = utf-8-bom
-insert_final_newline = true
-indent_style = tab
-trim_trailing_whitespace = true

.gitattributes

@@ -1,6 +1,3 @@
 * text=auto
 *.ps1  eol=crlf
 *.sh   eol=lf
-.gitattributes export-ignore
-.gitignore     export-ignore
-sign.sh        export-ignore

.whitesource

@@ -0,0 +1,14 @@
+{
+  "scanSettings": {
+    "baseBranches": []
+  },
+  "checkRunSettings": {
+    "vulnerableCheckRunConclusionLevel": "failure",
+    "displayMode": "diff",
+    "useMendCheckNames": true
+  },
+  "issueSettings": {
+    "minSeverityLevel": "LOW",
+    "issueType": "DEPENDENCY"
+  }
+}

README.md

@@ -1,5 +1,5 @@
-Fido: A PowerShell script to download Windows and UEFI Shell ISOs
+Fido: A PowerShell download script for Microsoft Windows and UEFI Shell ISOs
-=================================================================
+============================================================================
 
 [![Licence](https://img.shields.io/badge/license-GPLv3-blue.svg?style=flat-square)](https://www.gnu.org/licenses/gpl-3.0.en.html)
 [![Github stats](https://img.shields.io/github/downloads/pbatard/Fido/total.svg?style=flat-square)](https://github.com/pbatard/Fido/releases)
@@ -56,7 +56,12 @@ the actual download links, for all the architectures available for that language
 Requirements
 ------------
 
-Windows 8 or later with PowerShell. Windows 7 is __not__ supported.
+PowerShell 3.0 or later is required. However the script should detect if you are using an older version and point you to
+the relevant PowerShell 3.0 download page if needed (which should only ever occur if you are running a vanilla version
+of Windows 7).
+
+Note that the current version of the script does not need Internet Explorer to be installed and should also work with
+PowerShell 7.
 
 Commandline mode
 ----------------
@@ -64,9 +69,6 @@ Commandline mode
 Fido supports commandline mode whereas, whenever one of the following options is provided, a GUI is not instantiated
 and you can instead generate the ISO download from within a PowerShell console or script.
 
-Note however that, as of 2023.05, Microsoft has removed access to older releases of Windows ISOs and as a result, the
-list of releases that can be downloaded from Fido has had to be reduced to only the latest for each version.
-
 The options are:
 - `Win`: Specify Windows version (e.g. _"Windows 10"_). Abbreviated version should work as well (e.g `-Win 10`) as long
    as it is unique enough. If this option isn't specified, the most recent version of Windows is automatically selected.  
@@ -85,6 +87,7 @@ The options are:
    architecture as the one from the current system.
 - `GetUrl`: By default, the script attempts to automatically launch the download. But when using the `-GetUrl` switch,
    the script only displays the download URL, which can then be piped into another command or into a file.
+- `DisableProgress`: Disable progress report. This may speed up downloads when using the command line.
 
 Examples of a commandline download:
 
@@ -124,7 +127,7 @@ Additional Notes
 
 Because of its intended usage with Rufus, this script is not designed to cover every possible retail ISO downloads.
 Instead we mostly chose the ones that the general public is likely to request. For instance, we currently have no plan
-to add support for LTSB/LTSC Windows ISOs downloads.
+to add support for LTSB/LTSC Windows 10 ISOs downloads.
 
 If you are interested in such downloads, then you are kindly invited to visit the relevant download pages from Microsoft
 such as [this one](https://www.microsoft.com/evalcenter/evaluate-windows-10-enterprise) for LTSC versions.

sign.sh

@@ -21,7 +21,7 @@ sign_file() {
 }
 
 # Update the Authenticode signature
-MSYS2_ARG_CONV_EXCL='*' "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\signtool" sign /v /sha1 fc4686753937a93fdcd48c2bb4375e239af92dcb /fd SHA256 /tr http://timestamp.digicert.com /td SHA256 Fido.ps1
+MSYS2_ARG_CONV_EXCL='*' "C:\Program Files (x86)\Windows Kits\10\bin\10.0.22000.0\x64\signtool" sign /v /sha1 3dbc3a2a0e9ce8803b422cfdbc60acd33164965d /fd SHA256 /tr http://sha256timestamp.ws.symantec.com/sha256/timestamp /td SHA256 Fido.ps1
 read -s -p "Enter pass phrase for `realpath $PRIVATE_KEY`: " PASSWORD
 echo
 # Confirm that the pass phrase is valid by trying to sign a dummy file