diff options
| author | Lena <lena@omega> | 2026-07-01 00:00:00 +0000 |
|---|---|---|
| committer | Lena <lena@omega> | 2026-07-13 22:00:29 +0000 |
| commit | 2aa6920fb1568249d2466fa1b13760d1a51c0e8f (patch) | |
| tree | 5cd196d2017228cac43f2574d559d9a59b123a47 /rsh | |
| parent | 2593151ca2c67256442ad25b074504e3ecd3371f (diff) | |
| download | rsend-2aa6920fb1568249d2466fa1b13760d1a51c0e8f.tar.gz | |
ci: pin toolchains and verify release artifacts
Checksum-pin every downloaded toolchain archive. Before publishing,
verify the APK was built from HEAD, the tag matches versionName,
apksigner passes, and the tree is clean; publish a sha256 sidecar
and treat published assets as immutable. Compare full unsigned APKs
in verify-repro and run the Android unit tests in CI.
Diffstat (limited to 'rsh')
| -rw-r--r-- | rsh/e2e_test.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/rsh/e2e_test.go b/rsh/e2e_test.go index 1fa80c7..88cd317 100644 --- a/rsh/e2e_test.go +++ b/rsh/e2e_test.go @@ -23,7 +23,7 @@ func TestEndToEndRealRsync(t *testing.T) { // Build the rsh binary so rsync can exec it as its remote shell. rshBin := filepath.Join(t.TempDir(), "rsh") - if out, err := exec.Command("go", "build", "-o", rshBin, ".").CombinedOutput(); err != nil { + if out, err := exec.Command("go", "build", "-buildvcs=false", "-o", rshBin, ".").CombinedOutput(); err != nil { t.Fatalf("build rsh: %v\n%s", err, out) } |