summaryrefslogtreecommitdiffhomepage
path: root/.github/workflows
AgeCommit message (Collapse)AuthorFilesLines
2025-07-24Update names for git signature checking CI jobLinus Färnstrand1-1/+2
2025-07-18Trigger reproducible workflow on file changesAlbin1-4/+7
The intention with this change is primarily to improve our PR workflow so that some specific files trigger the reproducible workflow. It's not possible to trigger workflows on either PR `branches` OR `paths`, so as a workaround for this limitation we now also trigger on release note changes.
2025-07-16Add macOS devshell actions buildAlbin1-2/+8
2025-07-15Add nix devshell actions buildAlbin1-1/+32
This commit adds a job that runs a nix devshell build as part of the reproducible workflow, however at this point it will NOT check for reproducibility but rather just print the checksum of the build. This is because there are some remaining reproducibility issues that need to be addressed.
2025-07-15Add android devshell lockfile to lockdown listAlbin1-0/+1
2025-07-11Fix debug keystore usage in fork jobsAlbin1-4/+6
Moving the dummy debug keystore to an enviornment variable to make t accessible for forks. The dummy debug keystore is not considered a secret and is only used for test and verification.
2025-07-11Add `Impl` to allowed verbsJoakim Hulthe1-1/+1
It's not _really_ a word, but for us crabs, it kind-of is.
2025-07-10Add e2e test for Google play purchasesDavid Göransson1-0/+1
2025-07-09Install x86_64-pc-windows-gnu target in Windows Rust CI jobLinus Färnstrand1-0/+3
2025-07-08Clean up reproducible workflowAlbin1-24/+17
Improves readability and changes to a more generic approach of handling multiple artifacts, which allows for extending the range of artifacts we compare.
2025-07-08Extract gradle version in reproducible jobAlbin1-9/+28
2025-06-16Add offline mode for installer loader on WindowsMarkus Pettersson1-1/+1
Co-authored-by: Sebastian Holmin <sebastian.holmin@mullvad.net> Co-authored-by: Joakim Hulthe <joakim.hulthe@mullvad.net> Co-authored-by: David Lönnhager <david.l@mullvad.net>
2025-06-03Add if: always() to "archive test report" actionAndrew Bulhak1-0/+1
2025-06-03Add clippy when setting up iOS CIBug Magnet1-1/+3
2025-05-26Add ui test build step to ios ciSteffen1-0/+24
2025-05-26Fix yaml lintSteffen Ernst1-2/+2
2025-05-26Add run for ios e2e tests when pr openedSteffen Ernst2-0/+25
2025-05-26Simplify ios actionsSteffen Ernst4-11/+3
2025-05-26Fix checkout step needs to be in workflowSteffen Ernst4-0/+12
2025-05-26Refactor ios github actionsSteffen Ernst5-166/+19
2025-05-26Update setup-zig actionDavid Lönnhager4-4/+4
2025-05-23Update gradle to 8.14.1David Göransson1-3/+3
2025-05-21Update CI jobs to use new property naming schemeDavid Göransson1-2/+5
2025-05-19Use GitHub hosted Windows arm runnerMarkus Pettersson1-3/+7
2025-05-19Install `protoc` on Windows ARM runnerMarkus Pettersson1-2/+0
2025-05-19Install `zig` on Windows arm runnerMarkus Pettersson1-2/+0
2025-05-16Allow long filenames in git for the Windows Github runnersMarkus Pettersson1-0/+5
2025-05-15Bump nightly toolchain in cargo udeps workflowDavid Lönnhager1-1/+1
2025-05-14Fix flaky GitHub workflowsDavid Lönnhager4-0/+20
2025-05-13Build screenshots with MockRelease configurationmojganii1-1/+1
2025-05-12Update gradle version in reproducible build workflowJonatan Rhodin1-3/+3
2025-05-07Use latest commit in PR for reproducible buildsJonatan Rhodin1-2/+3
2025-05-06Add CI job to check permissionsAlbin1-0/+28
This added check is intended to catch unwanted permissions changes introduced by dependencies. It was added to the reproducible/F-Droid workflow since that's the only place where we build release artifacts at the time of adding this job. However, it should be moved to a more suitable place once we expand and refactor our CI setup.
2025-05-05Trigger reproducible builds on release branchAlbin1-0/+8
2025-04-22Add Ubuntu 25.04 VM to end-to-end testsMarkus Pettersson1-6/+8
2025-04-17Improve android repro workflowJonatan Rhodin1-3/+30
- Fetch tags so that release builds get the correct version - Reduce logs for fdroid server builds - Add support for using a specific commit instead of always using latest
2025-04-11Add Fedora 42 VM to end-to-end testsMarkus Pettersson1-4/+4
2025-04-02Mark trusted-metadata-signing-pubkeys as needing signatures to be editedLinus Färnstrand1-0/+1
2025-03-28Stop checking out submodules when running scheduled osv-scanner CILinus Färnstrand1-1/+1
2025-03-20Add new files to verify locked down flowDavid Göransson1-0/+4
2025-03-20Add github action to verify dependency keysDavid Göransson1-8/+22
2025-03-18Add workflow to ensure reproducibilityJonatan Rhodin1-0/+109
Co-Authored-By: Albin <albin@mullvad.net>
2025-03-18Use pre-built `test-manager` binary for Windows testsMarkus Pettersson1-3/+26
2025-03-18Skip fetching git tags before running testsSebastian Holmin1-3/+0
It was only needed to run `mullvad-version`
2025-03-18Output app version directly from workflow stepSebastian Holmin1-25/+32
2025-03-12Fix always build `test-manager` binaryMarkus Pettersson1-4/+3
2025-03-11Fix bug in nightly osv-scanner CI jobLinus Färnstrand2-2/+2
When we patched the CI job to allow checking out git submodules, I accidentally copy-pasted the wrong workflow yaml file. This made the nightly scheduled scan use the PR workflow. This workflow does not work in this setting, and it always just reported green status Moving back to consuming the workflow from google instead of our fork again, since the PR with the needed changes have been merged upstream
2025-03-05Sign and notarize installer downloaderDavid Lönnhager1-2/+2
2025-03-05Switch to rustls for installer-downloaderDavid Lönnhager1-2/+2
This also increases the file size limit with around 1M
2025-03-05Add packaging of macOS app to build.shDavid Lönnhager1-4/+5