signed-build.yml

name: Signed Build

on:
  push:
    tags:
      - '*'
  workflow_dispatch:

jobs:
  build-signed-apk:
    name: Build Signed APK
    runs-on: ubuntu-latest

    steps:
      - name: Project Checkout
        uses: actions/checkout@v4

      - name: Setup Android Build
        uses: ./.github/actions/setup-android-build

      - name: Decode Keystore
        run: |
          echo "${{ secrets.KEYSTORE }}" | base64 -d > ${{ github.workspace }}/keystore/release.jks

      - name: Build
        run: ./gradlew app:assemblePinboardapiRelease
        env:
          SIGN_BUILD: true
          SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
          SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}

      - name: Upload APK
        if: success()
        uses: actions/upload-artifact@v4
        with:
          name: signed-apk
          path: app/build/outputs/apk/pinboardapi/release/*.apk

  build-signed-aab:
    name: Build Signed AAB
    runs-on: ubuntu-latest

    steps:
      - name: Project Checkout
        uses: actions/checkout@v4

      - name: Setup Android Build
        uses: ./.github/actions/setup-android-build

      - name: Decode Keystore
        run: |
          echo "${{ secrets.KEYSTORE }}" | base64 -d > ${{ github.workspace }}/keystore/release.jks

      - name: Build
        run: ./gradlew app:bundlePinboardapiRelease
        env:
          SIGN_BUILD: true
          SIGNING_KEY_ALIAS: ${{ secrets.SIGNING_KEY_ALIAS }}
          SIGNING_KEY_PASSWORD: ${{ secrets.SIGNING_KEY_PASSWORD }}
          SIGNING_STORE_PASSWORD: ${{ secrets.SIGNING_STORE_PASSWORD }}

      - name: Upload AAB
        if: success()
        uses: actions/upload-artifact@v4
        with:
          name: signed-aab
          path: app/build/outputs/bundle/pinboardapiRelease/*.aab