How to check if current Android apk is generated from provided git commit?

Question

作为服务提供商，我想验证客户端是否发布了相同的git commit apk（我已对其进行了审查）。

Answer 1

If it is not being recorded during apk bundling, I believe it would be impossible to fetch. Have a look at this answer to get an idea of how to include a git hash.

Then there are two options
- Either feed that data up in some kind of Analytics (Preferred)
- Or you can go ahead and decompile your apk and hunt through the files.

Answer 2

您可以轻松检查的唯一方法是，从git commit自己构建APK，然后检查代码身份，也许查看APK中classes.dex文件的哈希值。