Skip to content

Build and publish APK #3

Build and publish APK

Build and publish APK #3

# yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
name: Build and publish APK
on: [workflow_dispatch]
env:
ANDROID_HOME: /root/.android/sdk
APK_PATH: app/build/outputs/apk/release/app-release-unsigned.apk
APKSIGNER: /root/.android/sdk/build-tools/34.0.0/apksigner
jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: write
steps:
- name: Checkout
uses: actions/checkout@v3
- name: Setup JDK
uses: actions/setup-java@v4
with:
java-version: 17
distribution: adopt
cache: gradle
- name: Cache Android SDK
#id: cache-android-sdk
uses: actions/cache@v4
with:
path: ${{ env.ANDROID_HOME }}
key: ${{ runner.os }}-android-sdk
- name: Setup Android SDK
## It is not necessary to check for cache hit as it
## will not download Android SDK again
#if: steps.cache-android-sdk.outputs.cache-hit != 'true'
uses: android-actions/setup-android@v3
with:
packages: ''
- name: Build unsigned APK
run: ./gradlew --no-daemon assembleRelease
- name: Sign APK
run: |
# Copy APK file to app-release.apk
mv ${{ env.APK_PATH }} app-release.apk
# Decode certificate
base64 -d <<< ${{ secrets.SIGN_CERT }} > cert.der
# Decode key
base64 -d <<< ${{ secrets.SIGN_KEY }} > key.der
# Sign APK file with private key
${{ env.APKSIGNER }} sign --key key.der --cert cert.der app-release.apk
# Remove key files
rm cert.der key.der
- name: Upload artifact
uses: actions/upload-artifact@v4
with:
name: app-release
path: app-release.apk
publish:
runs-on: ubuntu-latest
needs: build
permissions:
contents: write
steps:
- name: Download artifact
uses: actions/download-artifact@v4
with:
name: app-release
path: app-release.apk
- name: Create release
uses: ncipollo/release-action@v1
with:
artifacts: "app-release.apk"