Skip to content

fix(security): harden local trust boundaries - #36

Merged
AstorisTheBrave merged 5 commits into
mainfrom
sd/fix-code-scanning
Aug 24, 2026
Merged

fix(security): harden local trust boundaries#36
AstorisTheBrave merged 5 commits into
mainfrom
sd/fix-code-scanning

Conversation

@AstorisTheBrave

Copy link
Copy Markdown
Collaborator

Summary

  • make notification PendingIntents immutable and explicitly target app-owned components
  • replace opt-in trust-all TLS with session-scoped certificate pinning while retaining hostname verification
  • require a fresh Android Keystore-backed signature proof before unlocking the app
  • remove obsolete compileSdk 36 dependency update caps

Verification

  • :app:testDebugUnitTest (44 tests)
  • :app:assembleDebug
  • :app:lintDebug

@AstorisTheBrave
AstorisTheBrave merged commit c4b7658 into main Aug 24, 2026
7 checks passed
@AstorisTheBrave
AstorisTheBrave deleted the sd/fix-code-scanning branch August 24, 2026 18:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant