mirror
/
FairEmail
mirror of https://github.com/M66B/FairEmail.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Updated FAQ

This commit is contained in:
M66B 2024-07-23 07:48:05 +02:00
parent b8b4b87e5c
commit 46730ed606
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
FAQ.md
View File

@ -6033,6 +6033,11 @@ This feature is experimental and requires version 1.2171 or later for the GitHub
<a name="faq205"></a> <a name="faq205"></a>
**(205) How do I check the integrity of an APK file?** **(205) How do I check the integrity of an APK file?**
"*Artifact attestations enable you to create unfalsifiable provenance and integrity guarantees for the software you build.*
*In turn, people who consume your software can verify where and how your software was built.*"
Please [see here](https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds) for details.
You can verify in this way that an APK file was built and signed by a GitHub workflow: You can verify in this way that an APK file was built and signed by a GitHub workflow:
1. Install the [GitHub CLI](https://cli.github.com/) 1. Install the [GitHub CLI](https://cli.github.com/)

2
index.html
View File

@ -3007,6 +3007,8 @@ adb install /path/to/FairEmail-xxx.apk</code></pre>
<p>This feature is experimental and requires version 1.2171 or later for the GitHub version and version 1.2182 or later for the Play Store version.</p> <p>This feature is experimental and requires version 1.2171 or later for the GitHub version and version 1.2182 or later for the Play Store version.</p>
<p><br></p> <p><br></p>
<p><a name="faq205"></a> <strong>(205) How do I check the integrity of an APK file?</strong></p> <p><a name="faq205"></a> <strong>(205) How do I check the integrity of an APK file?</strong></p>
<p>“<em>Artifact attestations enable you to create unfalsifiable provenance and integrity guarantees for the software you build.</em> <em>In turn, people who consume your software can verify where and how your software was built.</em>”</p>
<p>Please <a href="https://docs.github.com/en/actions/security-guides/using-artifact-attestations-to-establish-provenance-for-builds">see here</a> for details.</p>
<p>You can verify in this way that an APK file was built and signed by a GitHub workflow:</p> <p>You can verify in this way that an APK file was built and signed by a GitHub workflow:</p>
<ol type="1"> <ol type="1">
<li>Install the <a href="https://cli.github.com/">GitHub CLI</a></li> <li>Install the <a href="https://cli.github.com/">GitHub CLI</a></li>