diff options
| author | Lena <lena@omega> | 2026-07-01 00:00:00 +0000 |
|---|---|---|
| committer | Lena <lena@omega> | 2026-07-13 22:00:29 +0000 |
| commit | 2aa6920fb1568249d2466fa1b13760d1a51c0e8f (patch) | |
| tree | 5cd196d2017228cac43f2574d559d9a59b123a47 /app/build.gradle | |
| parent | 2593151ca2c67256442ad25b074504e3ecd3371f (diff) | |
| download | rsend-2aa6920fb1568249d2466fa1b13760d1a51c0e8f.tar.gz | |
ci: pin toolchains and verify release artifacts
Checksum-pin every downloaded toolchain archive. Before publishing,
verify the APK was built from HEAD, the tag matches versionName,
apksigner passes, and the tree is clean; publish a sha256 sidecar
and treat published assets as immutable. Compare full unsigned APKs
in verify-repro and run the Android unit tests in CI.
Diffstat (limited to 'app/build.gradle')
| -rw-r--r-- | app/build.gradle | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/app/build.gradle b/app/build.gradle index 5cc640d..599b419 100644 --- a/app/build.gradle +++ b/app/build.gradle @@ -11,6 +11,7 @@ def keystoreProps = rootProject.file('keystore.properties') android { namespace 'invalid.lena.rsend' compileSdk 35 + buildToolsVersion '35.0.0' defaultConfig { applicationId 'invalid.lena.rsend' |