Webcord flathub verification

[corngoblin]

Any chance to get webcord or maybe the rework verified on flathub?

[SpacingBat3]

I don't maintain current Flathubs and Flatpaks are very likely to remain unsupported in the rework, at least at the beggining. As of signing builds, most likely that could be somehow done for deb and rpm archives and I might consider doing that to improve package integrity. I still can't like protect it from GitHub doing its stuff (since GitHub actually builds my app, not me) and the key is probably going to be associated with CI and won't be my personal GPG signing key, so you'll still rely on GitHub not doing anything malicious.

I suppose the most trusted way now is like compiling app from the source code on your own, since I sign the commits with GPG and the key I use is already published to some keyservers outside of GitHub (I don't remeber which, I think I've chosen the one used by Seahorse), so you can use that to validate the authenticity of my work (at least once I made it locally and I was the commiter).