Makussu/subtracks
1
0
Fork 0
mirror of https://github.com/austinried/subtracks.git synced 2026-11-11 15:29:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

ci: share the build and isolate the release credentials

Browse Source 
Extract checkout, nix, signing and the Gradle run into a reusable build
workflow used by CI, the next build and the release build job. The build
job holds only the signing secrets; the publish job is the only one with
a write token and the Play credential. The Play service account is now
written to a 0600 file and passed via --json_key instead of on argv.
This commit is contained in:
austinried
2026-10-08 18:52:44 +00:00
parent fded9949af
commit af3741a549
5 changed files with 153 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/build.gradle.kts
+1 -1
View File
@@ -87,7 +87,7 @@ android {
keyAlias = "androiddebugkey"
keyPassword = "android"
}
val keystorePath = providers.environmentVariable("RELEASE_KEYSTORE").orNull
val keystorePath = providers.environmentVariable("RELEASE_KEYSTORE").orNull?.takeIf { it.isNotBlank() }
if (keystorePath != null) {
create("release") {
storeFile = file(keystorePath)