WIP: include the developer APK signature if available
This is part of the great scrape. It is the APK signature from the original app developer for all the relevant APKs that I could find. There are probably more available, but this is a good start. For reproducible builds, this signature will be used on the APK that f-droid.org ships.
for more info, see fdroidserver#291 (closed)
Merge request reports
Activity
I cannot comment on the actual function, but I guess as soon as lint doesnt throw up on this, this is okay to merge.
Question: Do we need to do this manually or is this just to give us a headstart? Will fdroidserver pull those information from every build where
Binaries:
is set up if no information is available?waiting on fdroidserver!269 (merged)
Right now, its manual. We'll need to figure out what the best workflow for those signatures is. It might just be that including them manually via merge requests is the best way, so we have a nice, trackable history of those files. We should provide a tool to make it really easy to get those files from the APK.
added wait-for-submitter label
added apksig label