Add VirusTotal into our build pipeline

proletarius101
2025-12-24T19:46:14Z

<!--======= PLEASE READ THIS BEFORE FILING THE ISSUE =======

If you are looking to report an app, please check the corresponding metadata first. If the
latest version is added and not disabled, then just wait. It takes anywhere from 2-5 days
to finish the build & deploy to index/website.

Metadata are stored in this repo itself. Direct link for a published app's metadata is
accessible from the corresponding package's page on f-droid website.

Look here for more details:
* https://f-droid.org/en/docs/FAQ_-_App_Developers/#ive-published-a-new-release-why-is-it-not-in-the-repository
* https://gitlab.com/fdroid/wiki/-/wikis/FAQ#how-long-does-it-take-for-my-app-to-show-up-on-website-and-client

Optionally, you can also use a third party app to track build status:
https://f-droid.org/packages/de.storchp.fdroidbuildstatus/-->

_Google Play Protect displays a warning message whenever an unknown APK is about to be installed. Similar mechanisms are likely to be present in other antivirus applications. In order to simplify the process for users, it appears to be a wise decision to proactively offer the APK we build to VirusTotal (and, consequently, all of the most prominent antivirus programs) and forgo the warning that is given to the end user._

<!--❤️ Thank you for filling in a new report, we appreciate the help! ❤️
Please be patient while we try to find the time to look into your issue.

Remember that F-droid is developed by volunteers in their spare time,
we'll try our best to respond to all reports.-->