Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable Gradle dependency verification #373

Merged
merged 1 commit into from
Jul 7, 2023
Merged

Enable Gradle dependency verification #373

merged 1 commit into from
Jul 7, 2023

Conversation

chenxiaolong
Copy link
Owner

No description provided.

@chenxiaolong chenxiaolong self-assigned this Jul 6, 2023
@chenxiaolong chenxiaolong force-pushed the verification branch 2 times, most recently from 9c7a98e to 5670147 Compare July 6, 2023 23:09
@chenxiaolong
Copy link
Owner Author

The verification file is a bit annoying to generate/update due to a couple issues, but I still think this is worthwhile to enable to protect from compromised dependencies, especially with BCR having system app permissions.

Issues:

To generate the file in this PR, I ran:

./gradlew --stop
rm -r ~/.gradle/caches
./gradlew --write-verification-metadata sha512 --no-daemon build zipDebug -x assembleRelease

@chenxiaolong chenxiaolong merged commit 5326b33 into master Jul 7, 2023
@chenxiaolong chenxiaolong deleted the verification branch July 7, 2023 00:48
chenxiaolong added a commit that referenced this pull request Jul 7, 2023
Signed-off-by: Andrew Gunnerson <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants