build.yml

name: Build

on: [push, pull_request]

jobs:
  build:

    runs-on: ubuntu-latest

    steps:
    - name: Checkout Repository
      uses: actions/checkout@v3
    - name: set up JDK 16
      uses: actions/setup-java@v3
      with:
        java-version: 16
        distribution: 'adopt'
    - name: Setup Keystore
      run: |
        echo "${{ secrets.SIGNING_KEY }}" > release.b64
        base64 -d release.b64 > release.keystore
    - name: mobsfscan
      uses: MobSF/mobsfscan@0.2.0
      with:
        args: '. --sarif --output results.sarif || true'
    - name: Upload mobsfscan report
      uses: github/codeql-action/upload-sarif@v2
      with:
        sarif_file: results.sarif
    - name: Build with Gradle
      run: |
        ./gradlew clean assembleRelease \
        -PKEYSTORE=../release.keystore \
        -PKEYSTORE_PASSWORD=${{ secrets.KEY_STORE_PASSWORD }} \
        -PKEY_ALIAS=${{ secrets.ALIAS }} \
        -PKEY_PASSWORD=${{ secrets.KEY_PASSWORD }} \
        -PRELEASE_MAPS_MAPCACHE_API_KEY=${{ secrets.RELEASE_MAPS_MAPCACHE_API_KEY }}
    - name: Verify Signature
      run: $ANDROID_SDK_ROOT/build-tools/33.0.1/apksigner verify --print-certs mapcache/build/outputs/apk/release/mapcache.apk
    - name: List files in the repository
      run: |
        ls -R ${{ github.workspace }}
    - name: Upload Artifacts
      uses: actions/upload-artifact@v1
      with:
        name: mapcache
        path: mapcache/build/outputs/apk/release/mapcache.apk