androidgithubgoogle-playkeystoreelectronic-signature

is it safe to publish on github an application that will also be published in google play


is it safe to publish on github an application that will also be published in google play. pre-encrypted with my keystore.

I want to publish my application in google play. But I also want to attach the repository to my resume as a sample code and is it not risky? Is there a chance that because of this, someone using decryption methods will receive my electronic signature files (keystore etc)?


Solution

  • If you're intention is to show case the source code of you app in to any public git repos, then you should be careful about these things.

    1. Never commit your code which has any third party API keys or tokens
    2. Never include your app signing keys
    3. Never include any sensitive information about such as any login creds, passwords, etc...
    4. You should publish you're code only after uploading the relase build to the play store (In order to keep your package name available)

    With all these points noted and cleared, you can publish you app code on any public git repos