SecureCameraAndroid/.github/workflows/publish-release.yml at main · SecureCamera/SecureCameraAndroid · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
name: Publish Releases

on:
  push:
    tags:
      - 'v*'

jobs:
  build-and-publish-github-release:
    name: Build and publish GitHub release
    runs-on: ubuntu-latest
    permissions:
      contents: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: '17'

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4

      - name: Grant Permission to Execute
        run: chmod +x gradlew

      - name: Decode GitHub Release Keystore
        env:
          GITHUB_RELEASE_ENCODED_KEYSTORE: ${{ secrets.GH_RELEASE_ENCODED_KEYSTORE }}
        run: |
          echo $GITHUB_RELEASE_ENCODED_KEYSTORE | base64 -d > app/gh-release-keystore.jks

      - name: Run Unit Tests
        run: ./gradlew test

      - name: Enable KVM
        run: |
          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
          sudo udevadm control --reload-rules
          sudo udevadm trigger --name-match=kvm

      - name: AVD cache
        uses: actions/cache@v4
        id: avd-cache
        with:
          path: |
            ~/.android/avd/*
            ~/.android/adb*
          key: avd-33-google_apis

      #      - name: Run Instrumentation Tests
      #        uses: reactivecircus/android-emulator-runner@v2
      #        with:
      #          api-level: 33
      #          target: google_apis
      #          force-avd-creation: false
      #          emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
      #          disable-animations: true
      #          arch: x86_64
      #          script: ./gradlew connectedCheck

      - name: Build Signed Full Release APK
        env:
          KEYSTORE_FILE: gh-release-keystore.jks
          KEYSTORE_PASSWORD: ${{ secrets.GH_RELEASE_KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.GH_RELEASE_KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.GH_RELEASE_KEY_PASSWORD }}
        run: ./gradlew assembleFullRelease

      - name: Build Signed OSS Release APK
        env:
          KEYSTORE_FILE: gh-release-keystore.jks
          KEYSTORE_PASSWORD: ${{ secrets.GH_RELEASE_KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.GH_RELEASE_KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.GH_RELEASE_KEY_PASSWORD }}
        run: ./gradlew assembleOssRelease

      - name: Get version name
        id: get_version
        run: |
          VERSION_NAME=$(echo ${GITHUB_REF#refs/tags/v})
          echo "VERSION_NAME=$VERSION_NAME" >> $GITHUB_ENV

      - name: Create GitHub Release
        id: create_release
        uses: softprops/action-gh-release@v2
        with:
          name: Release ${{ env.VERSION_NAME }}
          draft: false
          prerelease: false
          files: |
            app/build/outputs/apk/full/release/app-full-release.apk
            app/build/outputs/apk/oss/release/app-oss-release.apk
          token: ${{ secrets.GITHUB_TOKEN }}

  build-and-publish-play-store:
    name: Build and publish to Play Store
    runs-on: ubuntu-latest
    needs: build-and-publish-github-release

    steps:
      - name: Checkout code
        uses: actions/checkout@v5

      - name: Set up JDK
        uses: actions/setup-java@v5
        with:
          distribution: 'temurin'
          java-version: '17'

      - name: Set up Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v4

      - name: Grant Permission to Execute
        run: chmod +x gradlew

      - name: Decode Keystore
        env:
          ENCODED_KEYSTORE: ${{ secrets.ENCODED_KEYSTORE }}
        run: |
          echo $ENCODED_KEYSTORE | base64 -d > app/keystore.jks

      - name: Build Full Release AAB
        env:
          KEYSTORE_FILE: keystore.jks
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
        run: ./gradlew bundleFullRelease

      - name: Setup Fastlane
        run: |
          gem install fastlane

      - name: Decode service account key
        env:
          PLAY_STORE_CONFIG_JSON: ${{ secrets.PLAY_STORE_CONFIG_JSON }}
        run: echo $PLAY_STORE_CONFIG_JSON > play-store-config.json

      - name: Deploy to Play Store
        run: fastlane deploy