chenxiaolong / BCR

A Basic Call Recorder for rooted Android devices
GNU General Public License v3.0
1.67k stars 109 forks source link

Enable Gradle dependency verification #373

Closed chenxiaolong closed 1 year ago

chenxiaolong commented 1 year ago

The verification file is a bit annoying to generate/update due to a couple issues, but I still think this is worthwhile to enable to protect from compromised dependencies, especially with BCR having system app permissions.

Issues:

To generate the file in this PR, I ran:

./gradlew --stop
rm -r ~/.gradle/caches
./gradlew --write-verification-metadata sha512 --no-daemon build zipDebug -x assembleRelease