Feature Request: Add virustotal or similar for scanning the apk releases

It would be great to have a safe-guard against unsafe releases.
It might happen if developers are compromised by worms for example.
There's already a good workflow implementation present at SmartTube: https://github.com/yuliskov/SmartTube/blob/master/.github/workflows/virustotal_scan.yml

I imagine for that to make sense both immutable releases (is a setting on the repo) and build attestation should be done first

Good idea, I need first to implement the build on github instead of gitlab.

Navigation Menu