Skip to content

Detect "debug" and "Google" keys

We've had one RB app using a debug key in F-Droid itself. And @IzzySoft has seen debug keys in his repo as well.

I think we should refuse to publish APKs using debug keys (e.g. looking for CN=Android Debug), just like we fails builds that produce debuggable APKs.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information