tag.yml

name: Release Tag CI/CD

on:
  push:
    tags:
      - '*'

jobs:
  build:
    runs-on: ubuntu-latest
    timeout-minutes: 60
    env:
      CCDROIDX_RELEASE_KEYSTORE_PASSWORD: ${{ secrets.CCDROIDX_RELEASE_KEYSTORE_PASSWORD }}
      CCDROIDX_RELEASE_KEY_ALIAS: ${{ secrets.CCDROIDX_RELEASE_KEY_ALIAS }}
      CCDROIDX_RELEASE_KEY_ALIAS_PASSWORD: ${{ secrets.CCDROIDX_RELEASE_KEY_ALIAS_PASSWORD }}
      CCDROIDX_RELEASE_KEYSTORE_PATH: release.keystore
      ENCRYPTED_KEY_STORE: ${{ secrets.ENCRYPTED_KEY_STORE }}
      GOOGLE_SERVICE_JSON: ${{ secrets.GOOGLE_SERVICE_JSON }}
    steps:
      - name: Checkout
        uses: actions/checkout@v3

      - name: Validate Gradle Wrapper
        uses: gradle/wrapper-validation-action@v1

      - name: Set up JDK 17
        uses: actions/setup-java@v3
        with:
          distribution: 'temurin'
          java-version: 17

      - name: Decrypt google service json
        run: |
          TMP_GOOGLE_SERVICE_JSON_DIR="${RUNNER_TEMP}"/play
          mkdir "${TMP_GOOGLE_SERVICE_JSON_DIR}"
          echo $GOOGLE_SERVICE_JSON | base64 -di > "${TMP_GOOGLE_SERVICE_JSON_DIR}"/google-services.json
          mv "${TMP_GOOGLE_SERVICE_JSON_DIR}"/google-services.json app/google-services.json

      - name: Decrypt keystore
        run: |
          TMP_KEYSTORE_FILE_PATH="${RUNNER_TEMP}"/keystore
          mkdir "${TMP_KEYSTORE_FILE_PATH}"
          echo $ENCRYPTED_KEY_STORE | base64 -di > "${TMP_KEYSTORE_FILE_PATH}"/release.keystore
          mv "${TMP_KEYSTORE_FILE_PATH}"/release.keystore release.keystore

      - name: Build app
        run: ./gradlew assembleFlossRelease assembleFullRelease wear:assembleRelease

      - name: Create Release
        id: create_release
        uses: softprops/action-gh-release@v1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
          draft: true
          prerelease: false
          files: '**/ccdroidx-*-release.apk'