release_build.yml

name: Build Release APK

on:  
  workflow_dispatch:
  push:
    tags:
      - '*'

concurrency: 
  group: "release-build"
  cancel-in-progress: true

jobs:
  build:

    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
    - name: Check out repository
      uses: actions/checkout@v4.1.0
      with:
        submodules: true
        
    - name: Set up Java 17
      uses: actions/setup-java@v3.13.0
      with:
        java-version: 17
        distribution: 'adopt'
        cache: gradle
        
    - name: Grant execution permission to Gradle Wrapper
      run: chmod +x gradlew
      
    - name: Build Release APK
      run: ./gradlew assembleRelease
      
    - name: Checks
      run: cd app/build && ls -R
      
    - uses: r0adkll/sign-android-release@v1
      name: Sign app APK
      id: sign_app
      with:
        releaseDirectory: app/release
        signingKeyBase64: ${{ secrets.KEY_BASE64 }}
        alias: ${{ secrets.ALIAS }}
        keyStorePassword: ${{ secrets.KEYSTORE_PASS }}
        keyPassword: ${{ secrets.KEYSTORE_PASS }}

    - uses: actions/upload-artifact@v3.1.3 
      with:
        name: Signed APK
        path: ${{steps.sign_app.outputs.signedReleaseFile}}