Remove Jonathan's gpg key while he's on leave

2024-01-26T06:54:38Z

Revert "Remove Jonathan's gpg key while he's on leave"

2023-10-09T11:21:07Z

This reverts commit 7d89e4ec89955ea64288373cffcab3981b2326b1.

Remove Jonathan's gpg key while he's on leave

2023-07-14T07:35:37Z

Create verification script and github action

2022-07-05T09:27:04Z

Create a script which verifies that a set of "locked down" files are not changed in commits that have not been signed. Create a github workflow that runs the script in the CI. The script accepts --whitelist and --import-gpg-keys arguments. The default settings are supposed to work on the build server without importing the gpg keys from the trusted_keys.pub file and running with a hardcoded whitelist commit. Make the CI workflow use these arguments as it is supposed to in .github. The public keys that can be imported are specified as files in the ci/keys/ directory. The files that are locked down are specified in the .github workflow as a single source of truth. This requires some complicated parsing in the verification script as well as a dependency from the verification script to the workflow YAML. These are not ideal design choices however the alternative is to not have a single source of truth for the locked down files as the github workflow can not depend on an external file. The mullvad signing key is named to be first in the list in order to be imported first. The whitelisted commit is the latest master before this commit

mullvadvpn/ci/keys/jonathan.pub, branch decrease-leaks-during-reconnect

Remove Jonathan's gpg key while he's on leave

Revert "Remove Jonathan's gpg key while he's on leave"

Remove Jonathan's gpg key while he's on leave

Create verification script and github action