From 161a49231e4362e2dc47af6e6e8d4eb32ad6ca67 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ricardo=20Fern=C3=A1ndez=20Serrata?= <76864299+Rudxain@users.noreply.github.com> Date: Fri, 28 Jun 2024 20:32:56 -0400 Subject: [PATCH 1/2] warn about unofficial builds in `README` --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 8901e0cb..05b5f893 100644 --- a/README.md +++ b/README.md @@ -18,10 +18,18 @@ out the latest features or test their pull request. This build can be obtained from one of the workflow runs listed on [Github Actions](https://github.com/termux/termux-api/actions) page. +> ![warning] +> It should go without saying that **PR build artifacts are totally unofficial** until merged. For security and privacy, you shouldn't download them if you haven't read (and understood) the full PR diff (not the workflow-run diff). +> +> Official build artifacts come from `master` (without username) + Signature keys of all offered builds are different. Before you switch the installation source, you will have to uninstall the Termux application and all currently installed plugins. Check https://github.com/termux/termux-app#Installation for more info. +> ![warning] +> Pull-Request builds are signed with the **same key** as the official builds. For more info, read the "Security warning" from [the app `README`](https://github.com/termux/termux-app/blob/master/README.md#github) + ## License Released under the [GPLv3 license](http://www.gnu.org/licenses/gpl-3.0.en.html). From d55640bfbeb6c92dbd38c63ac90d02724215de0a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ricardo=20Fern=C3=A1ndez=20Serrata?= <76864299+Rudxain@users.noreply.github.com> Date: Fri, 28 Jun 2024 20:35:20 -0400 Subject: [PATCH 2/2] fix warn format --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 05b5f893..6cfb122a 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,7 @@ out the latest features or test their pull request. This build can be obtained from one of the workflow runs listed on [Github Actions](https://github.com/termux/termux-api/actions) page. -> ![warning] +> [!warning] > It should go without saying that **PR build artifacts are totally unofficial** until merged. For security and privacy, you shouldn't download them if you haven't read (and understood) the full PR diff (not the workflow-run diff). > > Official build artifacts come from `master` (without username) @@ -27,7 +27,7 @@ Signature keys of all offered builds are different. Before you switch the installation source, you will have to uninstall the Termux application and all currently installed plugins. Check https://github.com/termux/termux-app#Installation for more info. -> ![warning] +> [!warning] > Pull-Request builds are signed with the **same key** as the official builds. For more info, read the "Security warning" from [the app `README`](https://github.com/termux/termux-app/blob/master/README.md#github) ## License