summaryrefslogtreecommitdiffhomepage
path: root/ci/keys
AgeCommit message (Collapse)AuthorFilesLines
2025-06-23Add Karl's gpg keyAlbin1-0/+35
2025-05-14Add Tobias and Davids PGP keysOskar2-0/+70
2025-02-12Revert "Remove Markus GPG pubkey"Markus Pettersson1-0/+35
This reverts commit 7eedcd8c025fe2b94029d10a08356db5f1cb58c9.
2025-02-10Remove Markus GPG pubkeyMarkus Pettersson1-35/+0
2024-11-26Add GPG key for JonLinus Färnstrand1-0/+35
2024-10-24Add new gpg key for JonatanLinus Färnstrand1-0/+35
2024-09-10Add PGP keys for Joakim and SebastianLinus Färnstrand2-0/+70
2024-07-30Remove Jonatans SSH keyOskar1-35/+0
2024-03-06Add david.goransson's GPG keyLinus Färnstrand1-0/+35
2024-02-22Replace Oskar's GPG public key file with armored versionOskar Nyberg1-0/+0
2024-01-26Remove Jonathan's gpg key while he's on leaveOskar Nyberg1-34/+0
2024-01-25Update Mullvad's signing signing key to include new third party sigsLinus Färnstrand1-58/+82
Added signatures from the Tor browser key (nice colab <3) Added signature from Georg Koppen who attached their own sig at the same time
2023-11-30Remove Andrej's GPG keyEmīls1-113/+0
2023-10-19Add Markus gpg keyLinus Färnstrand1-0/+35
2023-10-09Revert "Remove Jonathan's gpg key while he's on leave"Oskar Nyberg1-0/+34
This reverts commit 7d89e4ec89955ea64288373cffcab3981b2326b1.
2023-09-01Add Oskars new GPG keyLinus Färnstrand1-0/+0
2023-07-14Remove Jonathan's gpg key while he's on leaveOskar Nyberg1-34/+0
2023-07-13Add Marco's gpg keyLinus Färnstrand1-0/+35
2023-07-06Add Jonatans gpg keyLinus Färnstrand1-0/+35
2023-06-29Remove Hank's key. He will likely not commit more for the appLinus Färnstrand1-37/+0
2023-06-29Add Linus new gpg keyLinus Färnstrand1-0/+46
2023-02-21Update Emils GPG key to the new one (049F58CC80D9C78452151EE6EF0CCD68D0E5B9B1)Linus Färnstrand1-61/+32
2022-08-29Add Hank's gpg keyLinus Färnstrand1-0/+37
2022-07-05Create verification script and github actionJonathan8-0/+651
Create a script which verifies that a set of "locked down" files are not changed in commits that have not been signed. Create a github workflow that runs the script in the CI. The script accepts --whitelist <commit> and --import-gpg-keys arguments. The default settings are supposed to work on the build server without importing the gpg keys from the trusted_keys.pub file and running with a hardcoded whitelist commit. Make the CI workflow use these arguments as it is supposed to in .github. The public keys that can be imported are specified as files in the ci/keys/ directory. The files that are locked down are specified in the .github workflow as a single source of truth. This requires some complicated parsing in the verification script as well as a dependency from the verification script to the workflow YAML. These are not ideal design choices however the alternative is to not have a single source of truth for the locked down files as the github workflow can not depend on an external file. The mullvad signing key is named to be first in the list in order to be imported first. The whitelisted commit is the latest master before this commit