docs: clarify production scanner signing on Gitea #12

Closed

james.maes wants to merge 0 commits from james.maes/docs-scanner-production-signing AGit into main

pull from: james.maes/docs-scanner-production-signing

merge into: QRun-IO:main

QRun-IO:main

QRun-IO:feat/session-user-activity

QRun-IO:feat/e2e-scan-base64-extra

QRun-IO:fix/slow-link-timeouts

QRun-IO:fix/signout-idp-session

QRun-IO:fix/metadata-load-timeout

QRun-IO:ci/release-gates

QRun-IO:fix/widget-icon-string-main

QRun-IO:fix/restore-main-tree

QRun-IO:fix/widget-icon-string

QRun-IO:release/scanner-1.0.2-notes

QRun-IO:release/scanner-1.0.2

QRun-IO:fix/refresh-device-versions

QRun-IO:fix/company-signout-before-session-end

QRun-IO:test/available-scanner-photo-policy

QRun-IO:feature/gs1-record-photos

QRun-IO:docs/scanner-preview-publication

QRun-IO:feature/mobile-scanner-host

QRun-IO:feature/echo-scanner-presentation

QRun-IO:ci/qrun-android-publisher-main-20261102

QRun-IO:ci-proof/cache-interface-20261102

QRun-IO:ci-proof/android-shared-20261102

QRun-IO:archive/qrun-github-cutover-20261101/c55d3002b0d9/feature/echo-scanner-presentation

QRun-IO:migration/github-cutoff-reconcile-20261101

QRun-IO:archive/qrun-github-cutover-20261101/625a275de334/feature/mobile-scanner-host

QRun-IO:feature/orb-0.8-track

QRun-IO:feature/orb-0.7.17

QRun-IO:feature/orb-0712-stable-gate

QRun-IO:fix/package-token-0710

QRun-IO:fix/shared-publisher-context

QRun-IO:fix/current-registry

QRun-IO:feature/central-ci

Conversation 0 Commits - Files Changed -

james.maes commented 2026-11-04 15:44:50 +00:00

Owner

Copy link

Copy source

Replaces the unselected GitHub release instructions with the actual Gradle signing support and Gitea SDK publication scope. Documents organization key custody, distribution choices, upgrade identity and production APK verification, and records operator-reported manual acceptance. Documentation only, checked against current source and official Android guidance; diff and secret scans pass. No key, secret, tag, CI configuration or runtime changes.

Replaces the unselected GitHub release instructions with the actual Gradle signing support and Gitea SDK publication scope. Documents organization key custody, distribution choices, upgrade identity and production APK verification, and records operator-reported manual acceptance. Documentation only, checked against current source and official Android guidance; diff and secret scans pass. No key, secret, tag, CI configuration or runtime changes.

james.maes added 1 commit 2026-11-04 15:44:50 +00:00

docs: clarify production scanner signing on Gitea ... f58e28b0c2

Replace the unselected GitHub release instructions with the actual Gradle
signing inputs, Gitea SDK publication scope, key custody and channel decisions.
Record operator-reported manual acceptance and preserve the development-to-
production signer migration distinction. No keys, workflows or runtime change.

Checked against the Gradle configuration, current Gitea caller and official
Android signing documentation; git diff --check passes.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

james.maes closed this pull request 2026-11-04 23:29:11 +00:00

Pull request closed

Please reopen this pull request to perform a merge.

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qqq-android#12