diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index c30b2b201..8348485a8 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -117,6 +117,27 @@ jobs:
         token: ${{ secrets.GITHUB_TOKEN }}
         artifacts: "TRIfA-nightly.apk"
 
+    - name: update witness checksums for pull requests (part 2)
+      if: ${{ github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
+      run: |
+        git checkout .
+        echo "========= git diff before witness update  "========= "
+        git diff
+        echo "========= git diff before witness update  "========= "
+        cd android-refimpl-app ; ./gradlew -q calculateChecksums 2>/dev/null| grep -v 'Checking the license for' > app/witness.gradle 2>/dev/null
+        echo "========= git diff AFTER witness update  "========= "
+        git diff
+        echo "========= git diff AFTER witness update  "========= "
+
+    - name: Create Pull Request
+      if: ${{ github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
+      uses: peter-evans/create-pull-request@v6
+      with:
+        commit-message: update witness checksums
+        branch: 'create-pull-request/ffmpeg'
+        delete-branch: true
+        title: update witness checksums
+
 
   gradle-wrapper-validation:
     runs-on: ubuntu-latest