diff --git a/metadata/de.schildbach.wallet.yml b/metadata/de.schildbach.wallet.yml
index cdafa31d83..0c27631ef7 100644
--- a/metadata/de.schildbach.wallet.yml
+++ b/metadata/de.schildbach.wallet.yml
@@ -2048,6 +2048,10 @@ Builds:
     gradle:
       - prod
 
+AllowedAPKSigningKeys:
+  - bcb4b93636bb10c7ddaf61aa9604ff795dfdb05fad4d9412b335682f0b612e32
+  - 58dcd8a0edf2a590683ba022d22a8dca5659aabf4728741a5c07af738d53db38
+
 MaintainerNotes: |-
   When adding new versions, the build recipe must follow the reference build at
   https://github.com/bitcoin-wallet/bitcoin-wallet/blob/main/build.Containerfile
diff --git a/metadata/de.schildbach.wallet_test.yml b/metadata/de.schildbach.wallet_test.yml
index d5f1e95af1..5ba5f62ed3 100644
--- a/metadata/de.schildbach.wallet_test.yml
+++ b/metadata/de.schildbach.wallet_test.yml
@@ -2083,6 +2083,10 @@ Builds:
     gradle:
       - dev
 
+AllowedAPKSigningKeys:
+  - 939150041d8d943ad45d0e9bc390c3ea11ac0ac0685f2d774191fde29b6549ee
+  - 58dcd8a0edf2a590683ba022d22a8dca5659aabf4728741a5c07af738d53db38
+
 MaintainerNotes: |-
   When adding new versions, the build recipe must follow the reference build at
   https://github.com/bitcoin-wallet/bitcoin-wallet/blob/main/build.Containerfile
diff --git a/metadata/dev.obfusk.jiten.yml b/metadata/dev.obfusk.jiten.yml
index 096e848ddf..acf2f6eebe 100644
--- a/metadata/dev.obfusk.jiten.yml
+++ b/metadata/dev.obfusk.jiten.yml
@@ -196,6 +196,10 @@ Builds:
       - make release-arm64-v8a
     ndk: r22b
 
+AllowedAPKSigningKeys:
+  - f55aa87c7046501273f646a6a813787cbe2630e11e38183cfb2dbab6da48eb31
+  - e3603f6a1c0a41cb00ee821bbc4d07032d4b2ca26d03745d4a26ebebfbc7d4fd
+
 MaintainerNotes: We're excluding some *.xml.gz files from the scan process because
   they are only compressed to prevent the source repository from becoming unnecessarily
   large and to avoid going over the maximum individual file size of common git hosting
diff --git a/metadata/dev.obfusk.jiten_webview.yml b/metadata/dev.obfusk.jiten_webview.yml
index f30f550a40..0f1f54ce10 100644
--- a/metadata/dev.obfusk.jiten_webview.yml
+++ b/metadata/dev.obfusk.jiten_webview.yml
@@ -35,6 +35,10 @@ Builds:
     gradle:
       - yes
 
+AllowedAPKSigningKeys:
+  - adfdb82141aaeb25f26f8982be841c4d0540f461803a0ce4e24dd0c9fb1f81f3
+  - e3603f6a1c0a41cb00ee821bbc4d07032d4b2ca26d03745d4a26ebebfbc7d4fd
+
 AutoUpdateMode: None
 UpdateCheckMode: Static
 CurrentVersion: 1.0.3
diff --git a/metadata/dev.obfusk.sokobang.yml b/metadata/dev.obfusk.sokobang.yml
index bd4db74831..7d550899d1 100644
--- a/metadata/dev.obfusk.sokobang.yml
+++ b/metadata/dev.obfusk.sokobang.yml
@@ -211,6 +211,10 @@ Builds:
       - make android-release-arm64-v8a
     ndk: r22b
 
+AllowedAPKSigningKeys:
+  - 123422400ac0a9a4ee1edb0df0ab16e2688663292d4a3d0ea4e8a8dae2e7dba3
+  - e3603f6a1c0a41cb00ee821bbc4d07032d4b2ca26d03745d4a26ebebfbc7d4fd
+
 AutoUpdateMode: None
 UpdateCheckMode: Static
 CurrentVersion: 0.2.5
diff --git a/metadata/org.torproject.torservices.yml b/metadata/org.torproject.torservices.yml
index b3ec3a9823..5b894fdf8b 100644
--- a/metadata/org.torproject.torservices.yml
+++ b/metadata/org.torproject.torservices.yml
@@ -171,6 +171,10 @@ Builds:
     gradleprops:
       - abi-splits=arm64-v8a
 
+AllowedAPKSigningKeys:
+  - ae524768551c722865316b27823e03fbdbf22d72060b2902b411ebb2943a7841
+  - fdbd9538a76d4c39edce86e1f86709f8f0dacdf3841b9f116aa5021b342930d9
+
 MaintainerNotes: |
   Each release has 8 APKs because there are 4 ABIs and 2 signing keys
   (f-droid.org and upstream).