| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2025-06-23 | Add Karl's gpg key | Albin | 1 | -0/+35 | |
| 2025-05-14 | Add Tobias and Davids PGP keys | Oskar | 2 | -0/+70 | |
| 2025-02-12 | Revert "Remove Markus GPG pubkey" | Markus Pettersson | 1 | -0/+35 | |
| This reverts commit 7eedcd8c025fe2b94029d10a08356db5f1cb58c9. | |||||
| 2025-02-10 | Remove Markus GPG pubkey | Markus Pettersson | 1 | -35/+0 | |
| 2024-11-26 | Add GPG key for Jon | Linus Färnstrand | 1 | -0/+35 | |
| 2024-10-24 | Add new gpg key for Jonatan | Linus Färnstrand | 1 | -0/+35 | |
| 2024-09-10 | Add PGP keys for Joakim and Sebastian | Linus Färnstrand | 2 | -0/+70 | |
| 2024-07-30 | Remove Jonatans SSH key | Oskar | 1 | -35/+0 | |
| 2024-03-06 | Add david.goransson's GPG key | Linus Färnstrand | 1 | -0/+35 | |
| 2024-02-22 | Replace Oskar's GPG public key file with armored version | Oskar Nyberg | 1 | -0/+0 | |
| 2024-01-26 | Remove Jonathan's gpg key while he's on leave | Oskar Nyberg | 1 | -34/+0 | |
| 2024-01-25 | Update Mullvad's signing signing key to include new third party sigs | Linus Färnstrand | 1 | -58/+82 | |
| Added signatures from the Tor browser key (nice colab <3) Added signature from Georg Koppen who attached their own sig at the same time | |||||
| 2023-11-30 | Remove Andrej's GPG key | Emīls | 1 | -113/+0 | |
| 2023-10-19 | Add Markus gpg key | Linus Färnstrand | 1 | -0/+35 | |
| 2023-10-09 | Revert "Remove Jonathan's gpg key while he's on leave" | Oskar Nyberg | 1 | -0/+34 | |
| This reverts commit 7d89e4ec89955ea64288373cffcab3981b2326b1. | |||||
| 2023-09-01 | Add Oskars new GPG key | Linus Färnstrand | 1 | -0/+0 | |
| 2023-07-14 | Remove Jonathan's gpg key while he's on leave | Oskar Nyberg | 1 | -34/+0 | |
| 2023-07-13 | Add Marco's gpg key | Linus Färnstrand | 1 | -0/+35 | |
| 2023-07-06 | Add Jonatans gpg key | Linus Färnstrand | 1 | -0/+35 | |
| 2023-06-29 | Remove Hank's key. He will likely not commit more for the app | Linus Färnstrand | 1 | -37/+0 | |
| 2023-06-29 | Add Linus new gpg key | Linus Färnstrand | 1 | -0/+46 | |
| 2023-02-21 | Update Emils GPG key to the new one (049F58CC80D9C78452151EE6EF0CCD68D0E5B9B1) | Linus Färnstrand | 1 | -61/+32 | |
| 2022-08-29 | Add Hank's gpg key | Linus Färnstrand | 1 | -0/+37 | |
| 2022-07-05 | Create verification script and github action | Jonathan | 8 | -0/+651 | |
| Create a script which verifies that a set of "locked down" files are not changed in commits that have not been signed. Create a github workflow that runs the script in the CI. The script accepts --whitelist <commit> and --import-gpg-keys arguments. The default settings are supposed to work on the build server without importing the gpg keys from the trusted_keys.pub file and running with a hardcoded whitelist commit. Make the CI workflow use these arguments as it is supposed to in .github. The public keys that can be imported are specified as files in the ci/keys/ directory. The files that are locked down are specified in the .github workflow as a single source of truth. This requires some complicated parsing in the verification script as well as a dependency from the verification script to the workflow YAML. These are not ideal design choices however the alternative is to not have a single source of truth for the locked down files as the github workflow can not depend on an external file. The mullvad signing key is named to be first in the list in order to be imported first. The whitelisted commit is the latest master before this commit | |||||
