Never commit a release keystore

97698e4 · Gabriel Morell · 2026-09-12 17:44

1 files +9 -0
Message
{commit_body(@commit)}

Files changed

modified .gitignore
+9 −0
@@ -67,3 +67,12 @@ npm-debug.log
67 67 # Untracking them is its own change, not this one's to make.)
68 68 /native/*/target/
69 69 /priv/native/
70 +
71 +# Android release signing material. The APK signing key cannot be
72 +# rotated — Android checks its certificate on every update — so a
73 +# commit of one is not recoverable by deleting it later. Keep it in
74 +# OpenBao KV and in the CI secret, never here.
75 +# See android/README.md#the-release-keystore.
76 +*.jks
77 +*.keystore
78 +keystore.pass

Parents: c83c3d9