build.yml

name: Build

on: [push, pull_request]

jobs:
  build:

    runs-on: ubuntu-latest

    steps:
    - name: Checkout Repository
      uses: actions/checkout@v3
    - name: set up JDK 16
      uses: actions/setup-java@v3
      with:
        java-version: 16
        distribution: 'adopt'
    - name: List files in the repository
      run: |
        ls -R ${{ github.workspace }}
    - name: Setup Keystore
      run: |
        echo "${{ secrets.SIGNING_KEY }}" > release.b64
        base64 -d release.b64 > release.keystore
    - name: mobsfscan
      uses: MobSF/mobsfscan@0.2.0
      with:
        args: '. --sarif --output results.sarif || true'
    - name: Upload mobsfscan report
      uses: github/codeql-action/upload-sarif@v2
      with:
        sarif_file: results.sarif
    - name: Build with Gradle
      run: |
        ./gradlew clean assembleRelease \
        -PKEYSTORE=../release.keystore \
        -PKEYSTORE_PASSWORD=${{ secrets.KEY_STORE_PASSWORD }} \
        -PKEY_ALIAS=${{ secrets.ALIAS }} \
        -PKEY_PASSWORD=${{ secrets.KEY_PASSWORD }} \
        -PRELEASE_MAPS_MAPCACHE_API_KEY=${{ secrets.RELEASE_MAPS_MAPCACHE_API_KEY }}
    # - name: Sign APK
    #   uses: noriban/sign-android-release@v4
    #   with:
    #     releaseDirectory: mapcache/build/outputs/apk/release
    #     signingKeyBase64: ${{ secrets.SIGNING_KEY }}
    #     alias: ${{ secrets.ALIAS }}
    #     keyStorePassword: ${{ secrets.KEY_STORE_PASSWORD }}
    #     keyPassword: ${{ secrets.KEY_PASSWORD }}
    # - name: Copy Release Artifacts
    #   run: |
    #     mkdir mapcache/build/release
    #     cp mapcache/build/outputs/apk/release/mapcache-*-signed.apk "mapcache/build/release/mapcache-$(./gradlew mapcache:androidAppVersion | grep versionName | sed 's/^.*@//').apk"
    - name: List files in the repository
      run: |
        ls ${{ github.workspace }}
    - name: Upload Artifacts
      uses: actions/upload-artifact@v1
      with:
        name: mapcache
        path: mapcache/build/outputs/apk/release/mapcache-release.apk