diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 846c09a..02e5f38 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,9 +24,6 @@ jobs: cat gradle.backup.properties | grep -v configuration-cache > gradle.properties - name: Deploy to Sonatype run: ./gradlew publish - env: - ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_NEXUS_USERNAME }} - ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_NEXUS_PASSWORD }} - name: Build AAB & APK run: | ./gradlew :demo:bundleRelease :demo:assembleRelease diff --git a/release/.gitignore b/release/.gitignore new file mode 100644 index 0000000..69d0253 --- /dev/null +++ b/release/.gitignore @@ -0,0 +1,2 @@ +/secring.gpg +/signing.properties diff --git a/release/secring.gpg.aes b/release/secring.gpg.aes new file mode 100644 index 0000000..75edfb1 Binary files /dev/null and b/release/secring.gpg.aes differ diff --git a/release/signing-cleanup.sh b/release/signing-cleanup.sh new file mode 100755 index 0000000..864a41b --- /dev/null +++ b/release/signing-cleanup.sh @@ -0,0 +1,2 @@ +rm -f release/*.gpg +rm -f release/*.properties diff --git a/release/signing-pack.sh b/release/signing-pack.sh new file mode 100755 index 0000000..393b465 --- /dev/null +++ b/release/signing-pack.sh @@ -0,0 +1,10 @@ +read -sp "Enter the encrypt key: " ENCRYPT_KEY +echo + +if [[ -n "$ENCRYPT_KEY" ]]; then + openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/secring.gpg -out release/secring.gpg.aes -k ${ENCRYPT_KEY} + openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/signing.properties -out release/signing.properties.aes -k ${ENCRYPT_KEY} + +else + echo "Encrypt key is empty" +fi diff --git a/release/signing-unpack.sh b/release/signing-unpack.sh new file mode 100755 index 0000000..fee4c7e --- /dev/null +++ b/release/signing-unpack.sh @@ -0,0 +1,10 @@ +read -sp "Enter the encrypt key: " ENCRYPT_KEY +echo + +if [[ -n "$ENCRYPT_KEY" ]]; then + openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/secring.gpg.aes -out release/secring.gpg -k ${ENCRYPT_KEY} + openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/signing.properties.aes -out release/signing.properties -k ${ENCRYPT_KEY} + +else + echo "Encrypt key is empty" +fi diff --git a/release/signing.properties.aes b/release/signing.properties.aes new file mode 100644 index 0000000..3019a27 --- /dev/null +++ b/release/signing.properties.aes @@ -0,0 +1,3 @@ +Salted__a$7+To/b +[yW?UեM.':)"DRU3Gm71L|@F/L oD\x뒬DЗ=u