@nerds I'm creating reproducible builds for Amber. I have a functioning github workflow, but the dev said he didn't want to put his gpg keys into github, so im looking for advixe on work arounds. I think he is worried about the key being compromised, but that key should be rotated regardless of where its stored, correct? It could be stored in aws secrets manager and then jit access can be provided to the runner. Ultimately, the actual signing and upload of the manifest could be done locally then uploaded, right? That shouldn't affect reproducibility because the apks should have no ksecret material so verification is separate from reproducibility, right? Any thoughts are appreciated, I'm trying to get a cookie cutter process to add these as attestations in @Zapstore so we can have more features than fdroid. #asknostr

Badges are the mist under utilized feature of nostr. I know @Bugle.News #40HPW🎧 shit talks credentialism, but p2p endorsements are valuable. It would be cool for orgs like @OpenSats and @Sovereign Engineering to encourage its grantees/attendees to issue badges to those helping them in their coding adventures. I think building badges into @Zapstore would allow us to surpass the feature set of fdroid. If someone built a version of the PEP badges from permies.Com into nostr, that would be epic. Some scout leader should purple pill their kids and create a digital twin of their merit badges too, one day we will have the first eagle scout of nostr who never even went to a physical scout meeting.

Whats the latest on #frostr? Im interested to try it out. The use case i have would be that i want to put an nsec into github to automate signing events, but if github/the nsec is compromised, to be able to rotate it. This would allow devs to automate publishing apps to zapstore within their workflows without having to trust github to keep their nsec safe or spin up a separate npub just for this use case, which would enhance the WOT features of zapstore. #asknostr

Any feedback on this flyer is welcome. Im trying to see if i can get something started in my area. #permaculture

Foraged a pound of wild elderberry, first time making syrup, didnt die. Such a pretty color. Medicine from the field. #permaculture