Coder Social home page Coder Social logo

obfusk / rbtlog Goto Github PK

View Code? Open in Web Editor NEW
6.0 2.0 0.0 2.38 MB

Reproducible Builds Transparency Log for Android APKs

License: GNU Affero General Public License v3.0

Python 89.87% Shell 7.25% Makefile 2.88%
android apk reproducible reproducible-builds

rbtlog's People

Contributors

dependabot[bot] avatar obfusk avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar

rbtlog's Issues

CLI tool (rbtlog-check)

  • matrix of repo x rebuilder
  • args: repo url/name, appid, code/tag, --json
  • verified, unknown (not in log), missing (not in repo), error (e.g. sha256 mismatch)
  • use cache dir for repo index & rbtlog checkout
  • support local log dir
  • colours, checkmark etc.

apps/recipes

  • com.amaze.filemanager -> build ID, LLD build path, gradle wrapper
  • org.netdex.androidusbscript
  • in.hridayan.ashell -> tag mismatch, resource file names and PNGs
  • fr.dzx.audiosource -> AGP too old, PNGs, ???
  • com.cominatyou.batterytile
  • f.cking.software
  • org.breezyweather -> timestamps, local.properties
  • com.danilkinkin.buckwheat -> res/X9.ttf compresslevel=unknown, no gradle wrapper
  • me.hackerchick.catima -> commit hash mismatch on v2.28.0
  • com.meenbeese.chronos
  • com.sosauce.cutecalc -> tag mismatch
  • at.bitfire.davdroid -> flaky, timestamps
  • com.looker.droidify -> locales (fixed)
  • eu.faircode.email -> build ID, JAR
  • dev.jdtech.jellyfin -> timestamps, AAR
  • se.nullable.flickboard -> ???
  • org.handmadeideas.floccus -> icon
  • dev.patrickgold.florisboard.beta -> big DEX diff, timestamps, build ID, commit hash mismatch
  • org.fossify.calendar
  • org.fossify.clock
  • org.fossify.contacts
  • org.fossify.filemanager
  • org.fossify.gallery
  • org.fossify.musicplayer -> pg-map-id
  • org.fossify.phone
  • org.fossify.messages
  • org.fossify.voicerecorder -> tag mismatch
  • com.vishal2376.gitcoach -> .profm (needs upstream fix)
  • com.benlinskey.greekreference -> JARs & ZIPs
  • com.starry.greenstash
  • ru.application.homemedkit -> local.properties, commit hash mismatch
  • in.sunilpaulmathew.izzyondroid
  • com.jerboa
  • com.sjapps.jsonlist -> small patch for v1.4 tag mismatch
  • dev.zwander.lemmyredirect -> build UUID
  • dev.medzik.librepass.android
  • com.github.libretube -> commit hash mismatch on >= v0.22.1
  • com.martinmimigames.simplefileexplorer
  • com.github.whitescent.mastify -> tag mismatch, previous release is RB, can't build w/ firebase added
  • dev.zwander.mastodonredirect -> build UUID
  • com.zell_mbc.medilog
  • projects.medicationtracker -> build ID
  • com.futsch1.medtimer
  • ara.memoryguardian
  • juniojsv.minimum
  • org.joinmastodon.android.moshinda
  • com.sanmer.mrepo
  • com.machiav3lli.backup -> ???
  • com.machiav3lli.fdroid -> annotation (?!), locales (see droidify)
  • com.craxiom.networksurvey -> version code/name updated after tagging, google-services.json
  • com.hardbacknutter.nevertoomanybooks -> timestamps
  • com.gero.newpass -> version code/name updated after tagging, security issues
  • com.limo.notecompanion -> no gradle wrapper
  • kittoku.osc -> ??? (tiny diff), previous release is RB
  • io.github.devhyper.openvideoeditor
  • com.desarrollodroide.pagekeeper -> .profm (needs upstream fix)
  • com.ladsers.passtable.android
  • uk.me.paraskos.pdfrenderer
  • dev.zwander.peertuberedirect -> build UUID
  • com.github.axet.pingutils -> no gradle wrapper
  • ac.mdiq.podcini -> commit hash / tag mismatch, eventbus, libconscrypt_jni.so, API keys
  • ru.karasevm.privatednstoggle
  • com.example.programmingtools -> no gradle wrapper, weird
  • com.github.diegoberaldin.raccoonforlemmy.android -> locales, ???
  • it.fast4x.rimusic -> tag/version mismatch on v0.6.25
  • in.basulabs.shakealarmclock
  • com.vishal2376.snaptick -> big DEX diff (compose?)
  • com.bnyro.translate
  • de.grobox.liberario
  • de.hbch.traewelling
  • org.polymorphicshade.tubular -> flaky (desugaring), hebrew symlink
  • org.walkersguide.android -> ??? (tiny DEX diff), JAR
  • in.sunilpaulmathew.weatherwidget

  • org.schabi.newpipe -> flaky (desugaring), ???
  • ch.threema.app.libre -> JARs/AARs

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.