Enable dependency signature verification
Open
- Dominant language
- Kotlin
- Stars
- 2k
- Forks
- 313
- PR merge metrics
- No merged PRs in 30d
Description
Enable dependency signature verification to make sure that used dependencies have not been tampered with. Follow https://developer.android.com/build/dependency-verification guide to do this.
Contributor guide
Research direction
Start with the Android dependency verification guide linked in the issue, then inspect the repository's build configuration to identify where dependency resolution is defined. Enable verification there and confirm the project builds with dependencies checked against their signatures.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 52/100