mirror of
https://github.com/austinried/subtracks.git
synced 2026-11-10 15:11:58 +01:00
austinried
fded9949af
Set persist-credentials: false so the contents:write token is not left in .git/config where every later step (including the Gradle build) could read it, and delete the decoded keystore once signing is done.
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
name: Build Next
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
env:
|
|
NIX_CONFIG: experimental-features = nix-command flakes
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-26.04
|
|
timeout-minutes: 60
|
|
steps:
|
|
- uses: actions/checkout@v7
|
|
with:
|
|
persist-credentials: false
|
|
- uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 # v31.11.1
|
|
- uses: nix-community/cache-nix-action@7df957e333c1e5da7721f60227dbba6d06080569 # v7.0.2
|
|
with:
|
|
primary-key: nix-v2-${{ hashFiles('flake.lock', '**/*.nix') }}
|
|
restore-prefixes-first-match: nix-v2-
|
|
gc-max-store-size-linux: 6G
|
|
- name: Build next builds
|
|
run: nix develop --command gradle :app:assembleDebug :app:assembleNext --no-daemon
|
|
- name: Collect next builds
|
|
run: |
|
|
cp app/build/outputs/apk/debug/app-debug.apk subtracks-next-debug.apk
|
|
cp app/build/outputs/apk/next/app-next.apk subtracks-next.apk
|
|
- name: Upload next builds
|
|
uses: actions/upload-artifact@v7
|
|
with:
|
|
name: subtracks-next
|
|
path: |
|
|
subtracks-next-debug.apk
|
|
subtracks-next.apk
|