I do devops at work and my experience is that really any CI/CD system works, they all have enough features to do what you want. They all fundamentally just run scripts on boxes. Therefore, I say pick the easiest one, likely the one that is built into whatever Git system you are using.

Try to keep your pipelines simple-ish when you can, they almost never need to be that complicated. 95% of the time it’s just running a command or two. If a pipeline needs to do something complex, I’d recommend writing that script into the Git repo and calling it, rather than having a CI job that is 100 lines long.

Mind sharing what service you use for it? Paid or free?

Yes this is how I found out about it, by searching if there was a known Exodus scam with Snap. I can’t believe this has happened more than once, I don’t know how Snap works but that seems like a mistake you make once and then never again.

I reported the SNAP to Canonical. I understand that this is not directly KDE Discover’s fault, but I wonder if there’s still a possible solution (like a bigger warning for SNAP packages or something).

I’ve reported the SNAP to Canonical and emailed KDE security.

It looks like this exact same thing happened a year and a half ago (just search “snap exodus scam”).

My dad just got scammed a lot of money by downloading this fake Exodus cryptocurrency wallet from the Discover app. I really can’t blame him too much, it looks legit and usually you don’t think of getting scammed in the official Discover app.