batterytile/.github/workflows/release.yml at master · pgaskin/batterytile · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
name: release

on:
  push:
    tags:
      - 'v*'

jobs:
  app:
    name: App
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: '17'
          cache: gradle
      - run: ./gradlew app:assembleRelease
      - uses: actions/upload-artifact@v3
        with:
          name: app-release
          path: app/build/outputs/apk/release/app-release-unsigned.apk
  release:
    name: Release
    runs-on: ubuntu-latest
    environment: release
    permissions:
      contents: write
    needs:
      - app
    steps:
      - uses: actions/download-artifact@v3
        with:
          name: app-release
      - name: Write keystore
        run: echo "$KEYSTORE_BASE64" | base64 --decode > "$KEYSTORE_PATH"
        env:
          KEYSTORE_PATH: ${{ github.workspace }}/keystore.jks
          KEYSTORE_BASE64: ${{ secrets.KEYSTORE_BASE64 }}
      - name: Sign APK
        run: $ANDROID_HOME/build-tools/33.0.0/apksigner sign --ks "$KEYSTORE_PATH" --ks-pass env:KEYSTORE_PASSWORD --in app-release-unsigned.apk --out app-release.apk
        env:
          KEYSTORE_PATH: ${{ github.workspace }}/keystore.jks
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
      - name: Verify APK signature
        run: $ANDROID_HOME/build-tools/33.0.0/apksigner verify --print-certs app-release.apk
      - name: Create release
        uses: actions/github-script@v6
        id: create-release
        with:
          retries: 3
          result-encoding: string
          script: |
            const release = await github.rest.repos.createRelease({
              owner: context.repo.owner,
              repo: context.repo.repo,
              tag_name: context.ref.split('/').pop(),
              draft: true,
            })
            return release.data.id
      - name: Upload release asset
        uses: actions/github-script@v6
        with:
          retries: 3
          script: |
            await github.rest.repos.uploadReleaseAsset({
              owner: context.repo.owner,
              repo: context.repo.repo,
              release_id: ${{ toJSON(steps.create-release.outputs.result) }},
              data: require('fs').readFileSync('app-release.apk'),
              name: 'BatteryTile.apk',
            })