halkyon-days/halkyon
Watch
1
0
Fork
You've already forked halkyon
 0
Code Issues Pull requests Projects Releases 37 Packages Wiki Activity Actions

build: releases fetch their signing keys from Proton Pass into memory, never onto the disk

Browse source 
tool/with_signing_keys.sh downloads the app's Android keystore and the
F-Droid index's from the vault Infra · Signing into a folder under
$XDG_RUNTIME_DIR, runs tool/release.dart with their paths, and removes
the folder however the run ends. The passwords are asked for as ever.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-30 16:54:57 +01:00
commit cd3b88c174
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
1 changed files with 115 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tool/release/train-android-certificate.sha256
View file

@ -1,2 +1,3 @@
# The SHA-256 of the certificate that signs Halkyon Train's Android releases (key alias
# halkyon-train), as keytool prints it. tool/release.dart releases no APK signed otherwise.
38:BD:ED:BA:9B:8D:3F:2B:77:DE:20:E1:4F:65:9E:0B:BE:66:7A:07:6C:0F:56:05:8E:80:95:B2:B4:11:8A:6D