Review differences between main and nel0x/main: reproducible nel0x gplay build
Description
Based on the differences, I'll work out a build workflow that fits the nel0x gplay release on this repository. The draft should produce an unsigned release bundle that can be built reproducible. Just like the releases built off the release branch are reproducible. @nel0x can take the unsigned release bundle, sign and upload it to google play. Users may be able to download the bundle from google play using third party tools, strip the signature and verify if the release has been tampered with by comparing it to the published bundle here.
Goals
Provide a way users can verify if the published google play release was built from the tag and code in this repository. Just like we already do it regarding F-Droid reproducible builds.
@nel0x This is not ready for merge yet as it's just a review of the differences between both repos.
🤖 This pull request has been automatically locked because it was closed.