From a0acd2e0e66d74bcea9cbe10acd7704ef4ca8acb Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Mon, 17 Oct 2022 16:13:39 -0400
Subject: [PATCH] list key fingerprints for Pixel 7 and Pixel 7 Pro

---
 static/articles/attestation-compatibility-guide.html | 3 +++
 static/install/cli.html                              | 8 +++++---
 static/install/web.html                              | 8 +++++---
 3 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/static/articles/attestation-compatibility-guide.html b/static/articles/attestation-compatibility-guide.html
index 5821ebba..7e3a9e3c 100644
--- a/static/articles/attestation-compatibility-guide.html
+++ b/static/articles/attestation-compatibility-guide.html
@@ -78,6 +78,9 @@
             verified boot key fingerprints for the official GrapheneOS releases:</p>
 
             <ul>
+
+                <li><code>bc1c0dd95664604382bb888412026422742eb333071ea0b2d19036217d49182f</code>: Pixel 7 Pro</li>
+                <li><code>3efe5392be3ac38afb894d13de639e521675e62571a8a9b3ef9fc8c44fd17fa1</code>: Pixel 7</li>
                 <li><code>08c860350a9600692d10c8512f7b8e80707757468e8fbfeea2a870c0a83d6031</code>: Pixel 6a</li>
                 <li><code>439b76524d94c40652ce1bf0d8243773c634d2f99ba3160d8d02aa5e29ff925c</code>: Pixel 6 Pro</li>
                 <li><code>f0a890375d1405e62ebfd87e8d3f475f948ef031bbf9ddd516d5f600a23677e8</code>: Pixel 6</li>
diff --git a/static/install/cli.html b/static/install/cli.html
index 8c53bfcc..8dedf057 100644
--- a/static/install/cli.html
+++ b/static/install/cli.html
@@ -553,11 +553,13 @@ curl -O https://releases.grapheneos.org/<var>DEVICE_NAME</var>-factory-202111012
                         <p>When loading an alternate OS, the device shows a yellow notice on boot
                         with the ID of the alternate OS based on the sha256 of the verified boot
                         public key. 4th and 5th generation Pixels only show the first 32 bits of
-                        the hash so you can't use this approach. 6th generation Pixels show the
-                        full hash and you can compare it against the official GrapheneOS verified
-                        boot hashes below:</p>
+                        the hash so you can't use this approach. 6th and 7th generation Pixels
+                        show the full hash and you can compare it against the official GrapheneOS
+                        verified boot hashes below:</p>
 
                         <ul>
+                            <li>Pixel 7 Pro: <code>bc1c0dd95664604382bb888412026422742eb333071ea0b2d19036217d49182f</code></li>
+                            <li>Pixel 7: <code>3efe5392be3ac38afb894d13de639e521675e62571a8a9b3ef9fc8c44fd17fa1</code></li>
                             <li>Pixel 6a: <code>08c860350a9600692d10c8512f7b8e80707757468e8fbfeea2a870c0a83d6031</code></li>
                             <li>Pixel 6 Pro: <code>439b76524d94c40652ce1bf0d8243773c634d2f99ba3160d8d02aa5e29ff925c</code></li>
                             <li>Pixel 6: <code>f0a890375d1405e62ebfd87e8d3f475f948ef031bbf9ddd516d5f600a23677e8</code></li>
diff --git a/static/install/web.html b/static/install/web.html
index ce3ddf65..e5d7f9a1 100644
--- a/static/install/web.html
+++ b/static/install/web.html
@@ -362,11 +362,13 @@
                         <p>When loading an alternate OS, the device shows a yellow notice on boot
                         with the ID of the alternate OS based on the sha256 of the verified boot
                         public key. 4th and 5th generation Pixels only show the first 32 bits of
-                        the hash so you can't use this approach. 6th generation Pixels show the
-                        full hash and you can compare it against the official GrapheneOS verified
-                        boot hashes below:</p>
+                        the hash so you can't use this approach. 6th and 7th generation Pixels
+                        show the full hash and you can compare it against the official GrapheneOS
+                        verified boot hashes below:</p>
 
                         <ul>
+                            <li>Pixel 7 Pro: <code>bc1c0dd95664604382bb888412026422742eb333071ea0b2d19036217d49182f</code></li>
+                            <li>Pixel 7: <code>3efe5392be3ac38afb894d13de639e521675e62571a8a9b3ef9fc8c44fd17fa1</code></li>
                             <li>Pixel 6a: <code>08c860350a9600692d10c8512f7b8e80707757468e8fbfeea2a870c0a83d6031</code></li>
                             <li>Pixel 6 Pro: <code>439b76524d94c40652ce1bf0d8243773c634d2f99ba3160d8d02aa5e29ff925c</code></li>
                             <li>Pixel 6: <code>f0a890375d1405e62ebfd87e8d3f475f948ef031bbf9ddd516d5f600a23677e8</code></li>