I wanted create a signed android apk, and i used this guid https://www.koskila.net/how-to-build-a-functional-ci-cd-pipeline-for-a-maui-app-from-on-github-in-less-than-1-hour/ all my github action code is the same and after publishing app and distributing to appcenter, when i install app from appcenter on android every time Google Play Protect says that app could contain unsafe, e.g. unsafe, from untrusted source.
So steps i tooke to creat build:
created keystore locally on windows machine in cl:
keytool -genkey -v -keystore myapp.keystore -alias my_alies -keyalg RSA -keysize 2048 -validity 10000
modified csproj:
<PropertyGroup Condition="$(TargetFramework.Contains('-android')) and '$(Configuration)' == 'Release'"> <AndroidKeyStore>True</AndroidKeyStore> <AndroidSigningKeyStore>my_app.keystore</AndroidSigningKeyStore> <AndroidSigningKeyAlias>my_app_alies</AndroidSigningKeyAlias> <AndroidSigningKeyPass></AndroidSigningKeyPass> <AndroidSigningStorePass></AndroidSigningStorePass>
run command:
dotnet publish -f:net7.0-android -c:Release /p:AndroidSigningKeyPass=mypassword /p:AndroidSigningStorePass=mypassword
got file: myapp-signed.apk
then decided to use github action to delivery builds
- set up ci/cd from github action to deploy to appcenter and ran action
- got build on appcenter
- distirbuted build from appcenter to myself
- installing app
- here every time i install apk play store protect says its untrusted
How could make it trusted?