[New]: Filen #7067

Activity

1. Undercoat0

   added

   Run Checks

   on Oct 11, 2026
2. github-actions

   added

   User-Specified Download

   Store Signed

   on Oct 11, 2026
3. github-actions commented on Oct 11, 2026

   

   github-actionsBot

   on Oct 11, 2026 – with GitHub Actions

   Contributor

   More actions

   We attempted to check Accrescent, F-Droid (F-Droid and IzzyOnDroid), Google Play, your direct APK link, your app's verified domain for this app. If we found any results, they'll be in the table below:

   Source	Matches	Verification
   User-Provided	⬇️	io.filen.app 2C:90:DF:59:1A:39:E0:8A:AD:E9:4F:72:80:D1:92:D3:34:47:F0:1E:1E:12:75:19:82:B8:AE:C3:F9:0F:AD:AB
   Google Play	🔷	io.filen.app 2C:90:DF:59:1A:39:E0:8A:AD:E9:4F:72:80:D1:92:D3:34:47:F0:1E:1E:12:75:19:82:B8:AE:C3:F9:0F:AD:AB
   HTTPS Verified Domain (app.filen.io via Digital Asset Links (assetlinks.json))	✅	https://app.filen.io/.well-known/assetlinks.json 2C:90:DF:59:1A:39:E0:8A:AD:E9:4F:72:80:D1:92:D3:34:47:F0:1E:1E:12:75:19:82:B8:AE:C3:F9:0F:AD:AB
   HTTPS Verified Domain (filen.io via Digital Asset Links (assetlinks.json))	➖ superseded	https://filen.io/.well-known/assetlinks.json 2C:90:DF:59:1A:39:E0:8A:AD:E9:4F:72:80:D1:92:D3:34:47:F0:1E:1E:12:75:19:82:B8:AE:C3:F9:0F:AD:AB
   Direct APK Link	❌	io.filen.app 5B:DD:27:47:B7:CF:A9:8D:62:9E:4D:44:41:01:A9:CE:DC:E3:32:AD:6A:7F:2A:0B:14:F4:69:ED:93:7F:13:27

   ❗ We scanned the APK file at https://github.com/FilenCloudDienste/filen-ts/releases/download/filen-mobile%404.0.18/Filen-4.0.18.apk which the submitter provided. This does not indicate its legitimacy, you must confirm this is a legitimate source.

   🔷 Google Play: the fingerprint you submitted matches the certificate signed with Google Play App Signing, not a developer-owned key. This is fine, but it will likely never match the signatures found in other stores.

   1/2 of our sources matched what was provided. Some mismatches between app stores can be normal.

   If committed as-is, data.yml would change as follows (store signatures that matched the submitter's fingerprint):

   --- data.yml (current)
   +++ data.yml (after commit)
   @@ -1,15 +1,17 @@
      - package: io.filen.app
        signature:
          - fingerprint: 2C:90:DF:59:1A:39:E0:8A:AD:E9:4F:72:80:D1:92:D3:34:47:F0:1E:1E:12:75:19:82:B8:AE:C3:F9:0F:AD:AB
            sources:
              - name: Google Play
   -            issue: CB-152
   +            issue: GH-7067
                apk:
   -              sha256: 629345ece9a38ce722088b0e0e0a7edfb36b392f2d23cf37c07a9fa4a913422d
   +              sha256: ae7bd29c01130b8cd9c702b2afa5d49648f436aec6d15726de57eaaadcfc55c0
   +          - name: HTTPS Verified Domain
   +            issue: GH-7067
          - fingerprint: 5B:DD:27:47:B7:CF:A9:8D:62:9E:4D:44:41:01:A9:CE:DC:E3:32:AD:6A:7F:2A:0B:14:F4:69:ED:93:7F:13:27
            sources:
              - name: Direct APK Link
                issue: GH-867
                apk:
                  sha256: bbe462cd7f0dff94e906c0aba0024c4db36c526fb0d7f30a10d4a499c2dc7b5b
                  link: https://github.com/FilenCloudDienste/filen-mobile/releases/download/v3.0.35/app-release.apk

   Maintainers: add Commit As-Is to accept this entry on main immediately, or Create PR to open a pull request for manual edits first.
4. github-actions

   added

   Match Play

   and removed

   Run Checks

   on Oct 11, 2026