Add signed release APK workflow

Author: austineyoung2000

.github/workflows/android.yml

@@ -48,10 +48,21 @@ jobs:
       - name: Make gradlew executable
         run: chmod +x gradlew
 
+      - name: Decode release keystore
+        env:
+          RELEASE_KEYSTORE_BASE64: ${{ secrets.RELEASE_KEYSTORE_BASE64 }}
+        run: |
+          echo "$RELEASE_KEYSTORE_BASE64" | base64 -d > "$RUNNER_TEMP/red-release.jks"
+
       - name: Build debug APK
         run: ./gradlew assembleDebug
 
-      - name: Build release APK
+      - name: Build signed release APK
+        env:
+          SIGNING_STORE_FILE: ${{ runner.temp }}/red-release.jks
+          SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}
+          SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
+          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
         run: ./gradlew assembleRelease
 
       - name: Upload debug APK artifact
@@ -60,25 +71,25 @@ jobs:
           name: redmagic-debug-apk
           path: app/build/outputs/apk/debug/*.apk
 
-      - name: Upload release APK artifact
+      - name: Upload signed release APK artifact
         uses: actions/upload-artifact@v4
         with:
-          name: redmagic-release-apk
+          name: redmagic-signed-release-apk
           path: app/build/outputs/apk/release/*.apk
 
       - name: Create GitHub Release from tag
         if: startsWith(github.ref, 'refs/tags/v')
         uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ github.ref_name }}
-          name: Redmagic Control Center ${{ github.ref_name }}
+          name: RedMagic Root Control ${{ github.ref_name }}
           body: |
-            Release ${{ github.ref_name }}
+            Signed release build for ${{ github.ref_name }}
 
             Included files:
             - Debug APK
-            - Release APK
+            - Signed release APK
           files: |
             app/build/outputs/apk/debug/*.apk
             app/build/outputs/apk/release/*.apk
-          generate_release_notes: true
+          generate_release_notes: true

app/build.gradle.kts

@@ -3,6 +3,13 @@ plugins {
     id("org.jetbrains.kotlin.android")
 }
 
+val hasSigning = listOf(
+    "SIGNING_STORE_FILE",
+    "SIGNING_STORE_PASSWORD",
+    "SIGNING_KEY_ALIAS",
+    "SIGNING_KEY_PASSWORD"
+).all { !System.getenv(it).isNullOrBlank() }
+
 android {
     namespace = "com.elitedarkkaiser.redmagic"
     compileSdk = 35
@@ -15,9 +22,23 @@ android {
         versionName = "1.0.1rc1"
     }
 
+    signingConfigs {
+        if (hasSigning) {
+            create("release") {
+                storeFile = file(System.getenv("SIGNING_STORE_FILE")!!)
+                storePassword = System.getenv("SIGNING_STORE_PASSWORD")
+                keyAlias = System.getenv("SIGNING_KEY_ALIAS")
+                keyPassword = System.getenv("SIGNING_KEY_PASSWORD")
+            }
+        }
+    }
+
     buildTypes {
         release {
             isMinifyEnabled = false
+            if (hasSigning) {
+                signingConfig = signingConfigs.getByName("release")
+            }
             proguardFiles(
                 getDefaultProguardFile("proguard-android-optimize.txt"),
                 "proguard-rules.pro"