Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verify apk releases #150

Merged
merged 5 commits into from
Sep 2, 2023
Merged

Verify apk releases #150

merged 5 commits into from
Sep 2, 2023

Conversation

KKA11010
Copy link
Collaborator

This pull request introduces a verification process for APK releases. The changes include an automated script that updates the verification files that ensures the authenticity and integrity of the released apk's.

The current process for releasing a production APK looks like this:

  • Create a release tag: "v*"
  • Download the APK from expo and paste it into the folder utils/verification locally
  • run the release script locally: utils/release.sh
  • commit and push the changes
  • attach the downloaded apk to the release notes, provide the apk hash and link to the readme section about verifying a release.

This is not an optimal workflow... Thoughts or improvements are very welcome!

Changes

  • Providing APK release hashes
  • Providing detach-signed files
  • Added a script (release.sh) to handle the update of verification files.
  • The script calculates checksums, generates detached signatures for APK files, and updates the hash list.
  • Updated the README with detailed instructions on how to verify an APK

@KKA11010 KKA11010 added documentation Improvements or additions to documentation enhancement New feature or request help wanted Extra attention is needed labels Aug 29, 2023
@KKA11010 KKA11010 added this to the First Beta Release milestone Aug 29, 2023
@KKA11010 KKA11010 self-assigned this Aug 29, 2023
@KKA11010 KKA11010 merged commit 1cb308d into main Sep 2, 2023
3 checks passed
@KKA11010 KKA11010 deleted the verify branch September 2, 2023 19:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant