|
| 1 | +name: Build Release Artifacts |
| 2 | + |
| 3 | +on: |
| 4 | + workflow_dispatch: |
| 5 | + |
| 6 | +jobs: |
| 7 | + android: |
| 8 | + runs-on: ubuntu-latest |
| 9 | + timeout-minutes: 30 |
| 10 | + steps: |
| 11 | + - uses: actions/checkout@v5 |
| 12 | + - uses: actions/setup-java@v5 |
| 13 | + with: |
| 14 | + distribution: temurin |
| 15 | + java-version: "17" |
| 16 | + - name: Build release APK |
| 17 | + run: | |
| 18 | + chmod +x ./gradlew |
| 19 | + ./gradlew test lint assembleRelease |
| 20 | + - name: Sign and verify APK |
| 21 | + env: |
| 22 | + KEYSTORE_BASE64: ${{ secrets.ANDROID_RELEASE_KEYSTORE_BASE64 }} |
| 23 | + STORE_PASSWORD: ${{ secrets.ANDROID_RELEASE_STORE_PASSWORD }} |
| 24 | + KEY_PASSWORD: ${{ secrets.ANDROID_RELEASE_KEY_PASSWORD }} |
| 25 | + run: | |
| 26 | + set -euo pipefail |
| 27 | + test -n "$KEYSTORE_BASE64" |
| 28 | + printf '%s' "$KEYSTORE_BASE64" | base64 --decode > "$RUNNER_TEMP/release.keystore" |
| 29 | + KEY_ALIAS="$(keytool -list -v -keystore "$RUNNER_TEMP/release.keystore" -storepass "$STORE_PASSWORD" | sed -n 's/^Alias name: //p' | head -n 1)" |
| 30 | + test -n "$KEY_ALIAS" |
| 31 | + BUILD_TOOLS="$(find "$ANDROID_HOME/build-tools" -mindepth 1 -maxdepth 1 -type d | sort -V | tail -n 1)" |
| 32 | + "$BUILD_TOOLS/zipalign" -f -p 4 app/build/outputs/apk/release/app-release-unsigned.apk build/ScoutEventi-Android-v6.1.0-aligned.apk |
| 33 | + "$BUILD_TOOLS/apksigner" sign \ |
| 34 | + --ks "$RUNNER_TEMP/release.keystore" \ |
| 35 | + --ks-key-alias "$KEY_ALIAS" \ |
| 36 | + --ks-pass "pass:$STORE_PASSWORD" \ |
| 37 | + --key-pass "pass:$KEY_PASSWORD" \ |
| 38 | + --out build/ScoutEventi-Android-v6.1.0.apk \ |
| 39 | + build/ScoutEventi-Android-v6.1.0-aligned.apk |
| 40 | + "$BUILD_TOOLS/apksigner" verify --verbose --print-certs build/ScoutEventi-Android-v6.1.0.apk |
| 41 | + sha256sum build/ScoutEventi-Android-v6.1.0.apk > build/ScoutEventi-Android-v6.1.0.sha256 |
| 42 | + rm -f build/ScoutEventi-Android-v6.1.0-aligned.apk "$RUNNER_TEMP/release.keystore" |
| 43 | + - uses: actions/upload-artifact@v6 |
| 44 | + with: |
| 45 | + name: android-release-v6.1.0 |
| 46 | + if-no-files-found: error |
| 47 | + path: | |
| 48 | + build/ScoutEventi-Android-v6.1.0.apk |
| 49 | + build/ScoutEventi-Android-v6.1.0.sha256 |
| 50 | +
|
| 51 | + ios: |
| 52 | + runs-on: macos-15 |
| 53 | + timeout-minutes: 40 |
| 54 | + steps: |
| 55 | + - uses: actions/checkout@v5 |
| 56 | + - uses: actions/setup-java@v5 |
| 57 | + with: |
| 58 | + distribution: temurin |
| 59 | + java-version: "17" |
| 60 | + - name: Build unsigned iOS app |
| 61 | + run: | |
| 62 | + set -euo pipefail |
| 63 | + chmod +x ./gradlew |
| 64 | + mkdir -p build |
| 65 | + xcodebuild \ |
| 66 | + -project iosApp/iosApp.xcodeproj \ |
| 67 | + -scheme iosApp \ |
| 68 | + -configuration Release \ |
| 69 | + -sdk iphoneos \ |
| 70 | + -derivedDataPath build/ios-release \ |
| 71 | + -destination 'generic/platform=iOS' \ |
| 72 | + CODE_SIGNING_ALLOWED=NO \ |
| 73 | + CODE_SIGNING_REQUIRED=NO \ |
| 74 | + CODE_SIGN_IDENTITY='' \ |
| 75 | + DEVELOPMENT_TEAM='' \ |
| 76 | + MARKETING_VERSION=6.1.0 \ |
| 77 | + APP_MARKETING_VERSION=6.1.0 \ |
| 78 | + CURRENT_PROJECT_VERSION=7 \ |
| 79 | + APP_BUILD_NUMBER=7 \ |
| 80 | + clean build | tee build/ios-release.log |
| 81 | + - name: Package and verify unsigned IPA |
| 82 | + run: | |
| 83 | + set -euo pipefail |
| 84 | + APP_PATH="$(find build/ios-release/Build/Products -maxdepth 2 -type d -name '*.app' | head -n 1)" |
| 85 | + test -n "$APP_PATH" |
| 86 | + mkdir -p build/ios-package/Payload |
| 87 | + ditto "$APP_PATH" "build/ios-package/Payload/$(basename "$APP_PATH")" |
| 88 | + (cd build/ios-package && zip -qry ../ScoutEventi-iOS-unsigned-v6.1.0.ipa Payload) |
| 89 | + unzip -t build/ScoutEventi-iOS-unsigned-v6.1.0.ipa |
| 90 | + shasum -a 256 build/ScoutEventi-iOS-unsigned-v6.1.0.ipa > build/ScoutEventi-iOS-unsigned-v6.1.0.sha256 |
| 91 | + - uses: actions/upload-artifact@v6 |
| 92 | + with: |
| 93 | + name: ios-release-v6.1.0 |
| 94 | + if-no-files-found: error |
| 95 | + path: | |
| 96 | + build/ScoutEventi-iOS-unsigned-v6.1.0.ipa |
| 97 | + build/ScoutEventi-iOS-unsigned-v6.1.0.sha256 |
| 98 | + build/ios-release.log |
0 commit comments