diff options
| author | Lena <lena@omega> | 2026-08-16 00:00:00 +0000 |
|---|---|---|
| committer | Lena <lena@omega> | 2026-08-16 00:00:00 +0000 |
| commit | 8c6390571d28ff21a98ed3802458aceddbb6d2a0 (patch) | |
| tree | 1903e6a19389b127d4857f20a8cf06195d68daae /ci/build.sh | |
| parent | 0e8a87f2ad2bd40d34996374aebb6dff070e4b5f (diff) | |
| download | rsend-8c6390571d28ff21a98ed3802458aceddbb6d2a0.tar.gz | |
build: pin and verify release inputs
Support Alpine/musl and Debian/glibc hosts, lock downloaded and
Gradle artifacts, and verify native and APK security properties.
Diffstat (limited to 'ci/build.sh')
| -rwxr-xr-x | ci/build.sh | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/ci/build.sh b/ci/build.sh index c99ec5f..24cd8fc 100755 --- a/ci/build.sh +++ b/ci/build.sh @@ -3,10 +3,15 @@ # Requires the pinned toolchain (see versions): Android SDK + NDK, a JDK, Go. set -eu -root=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd) +root=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd) make -C "$root" app -git -C "$root" rev-parse HEAD > "$root/app/build/outputs/apk/release/.source-commit" -echo "ci: APK at app/build/outputs/apk/release/" -ls -l "$root"/app/build/outputs/apk/release/*.apk +if [ -f "$root/keystore.properties" ]; then + apk="$root/app/build/outputs/apk/release/app-release.apk" +else + apk="$root/app/build/outputs/apk/release/app-release-unsigned.apk" +fi +echo "ci: APK at $apk" +ls -l "$apk" +"$root/ci/verify-apk.sh" "$apk" |