ExpenseTracker/.github/workflows/android.yml at master · stephenWanjala/ExpenseTracker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
name: Build and Release

on:
  push:
    tags:
      - "v*"

jobs:
  build:
    name: Build and Release
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup JDK
        uses: actions/setup-java@v4
        with:
          distribution: 'temurin'
          java-version: '17'

      - name: Setup Android SDK
        uses: android-actions/setup-android@v3
        with:
          sdk-version: 35

      - name: Cache Gradle dependencies
        uses: actions/cache@v4
        with:
          path: |
            ~/.gradle/caches
            ~/.gradle/wrapper
          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
          restore-keys: |
            ${{ runner.os }}-gradle-

      - name: Set execution flag for gradlew
        run: chmod +x gradlew

      - name: Setup keystore file
        run: |
          echo "${{ secrets.KEYSTORE_FILE }}" | base64 --decode > $HOME/ExpenseTracker.jks
          chmod 600 $HOME/ExpenseTracker.jks
          echo "KEYSTORE_FILE_PATH=$HOME/ExpenseTracker.jks" >> $GITHUB_ENV

      - name: Build APK
        run: ./gradlew assembleRelease --stacktrace
        env:
          KEYSTORE_FILE_PATH: ${{ env.KEYSTORE_FILE_PATH }}
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}

      - name: Debug APK location
        run: |
          find . -name "*.apk" -type f
          ls -la app/build/outputs/apk/release/

      - name: Zipalign the APK
        run: |
          UNSIGNED_APK=$(find . -name "app-release-unsigned.apk" -type f)
          if [ -z "$UNSIGNED_APK" ]; then
            echo "Unsigned APK not found"
            exit 1
          fi
          echo "Found unsigned APK at: $UNSIGNED_APK"
          ${ANDROID_HOME}/build-tools/35.0.0/zipalign -f -v 4 \
          "$UNSIGNED_APK" \
          app/build/outputs/apk/release/app-release-aligned.apk

      - name: Sign APK with APK Signer
        run: |
          ${ANDROID_HOME}/build-tools/35.0.0/apksigner sign \
          --ks ${{ env.KEYSTORE_FILE_PATH }} \
          --ks-pass pass:${{ secrets.KEYSTORE_PASSWORD }} \
          --ks-key-alias ${{ secrets.KEY_ALIAS }} \
          --key-pass pass:${{ secrets.KEY_PASSWORD }} \
          --v1-signing-enabled true \
          --v2-signing-enabled true \
          --v3-signing-enabled true \
          --v4-signing-enabled true \
          --out app/build/outputs/apk/release/app-release.apk \
          app/build/outputs/apk/release/app-release-aligned.apk

      - name: Verify APK
        run: |
          ${ANDROID_HOME}/build-tools/35.0.0/apksigner verify --verbose app/build/outputs/apk/release/app-release.apk

      - name: Create Release
        uses: softprops/action-gh-release@v2
        with:
          files: app/build/outputs/apk/release/app-release.apk
          name: Release ${{ github.ref_name }}
          draft: false
          prerelease: false
        env:
          GITHUB_TOKEN: ${{ secrets.TOKEN }}