android / android/androidify

Enable dependency signature verification

Open
#175 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
2k
Forks
313
PR merge metrics
No merged PRs in 30d

Description

Enable dependency signature verification to make sure that used dependencies have not been tampered with. Follow https://developer.android.com/build/dependency-verification guide to do this.

Contributor guide

Open the contributing guide

Research direction

Start with the Android dependency verification guide linked in the issue, then inspect the repository's build configuration to identify where dependency resolution is defined. Enable verification there and confirm the project builds with dependencies checked against their signatures.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
build-system, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.