✨ feat(workflows): aggiungi check pacchetti obsoleti e migliora audit sicurezza
- aggiungi workflow separato per controllo dipendenze obsolete - aggiorna maintenance.yml per distinguere tra audit sicurezza e check obsolete - aggiorna nomi e struttura dei job per maggiore chiarezza - carica artifact Android con nome versione dinamico - separa issue sicurezza da quelle di pacchetti obsoleti in CI - migliora trigger per job di manutenzione periodica【workflows】
This commit is contained in:
@@ -78,6 +78,12 @@ jobs:
|
||||
echo "@pzeta:registry=https://gitea.pzetatouch.it/api/packages/pzeta_touch/npm/" >> ~/.npmrc
|
||||
echo "//gitea.pzetatouch.it/api/packages/pzeta_touch/npm/:_authToken=${{ secrets.NPM_TOKEN }}" >> ~/.npmrc
|
||||
|
||||
- name: Read app info from package.json
|
||||
id: app-info
|
||||
run: |
|
||||
echo "name=$(node -e \"console.log(require('./package.json').name)\")" >> $GITHUB_OUTPUT
|
||||
echo "version=$(node -e \"console.log(require('./package.json').version)\")" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
@@ -112,6 +118,15 @@ jobs:
|
||||
./gradlew assembleDebug
|
||||
fi
|
||||
|
||||
- name: Rename APK
|
||||
if: inputs.output-format == 'apk'
|
||||
run: |
|
||||
APP="${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}"
|
||||
APK_DIR="android/app/build/outputs/apk/${{ inputs.build-type }}"
|
||||
mv "$APK_DIR"/app-${{ inputs.build-type }}.apk "$APK_DIR/${APP}.apk" 2>/dev/null || \
|
||||
mv "$APK_DIR"/app-${{ inputs.build-type }}-unsigned.apk "$APK_DIR/${APP}.apk" 2>/dev/null || \
|
||||
find "$APK_DIR" -name "*.apk" ! -name "${APP}.apk" -exec mv {} "$APK_DIR/${APP}.apk" \;
|
||||
|
||||
- name: Build Android (AAB)
|
||||
if: inputs.output-format == 'aab'
|
||||
working-directory: android
|
||||
@@ -121,20 +136,27 @@ jobs:
|
||||
KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
|
||||
run: ./gradlew bundleRelease
|
||||
|
||||
- name: Rename AAB
|
||||
if: inputs.output-format == 'aab'
|
||||
run: |
|
||||
APP="${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release"
|
||||
AAB_DIR="android/app/build/outputs/bundle/release"
|
||||
find "$AAB_DIR" -name "*.aab" ! -name "${APP}.aab" -exec mv {} "$AAB_DIR/${APP}.aab" \;
|
||||
|
||||
- name: Upload APK artifact
|
||||
if: inputs.output-format == 'apk'
|
||||
uses: https://github.com/actions/upload-artifact@v3
|
||||
with:
|
||||
name: android-${{ inputs.build-type || 'debug' }}-apk
|
||||
path: android/app/build/outputs/apk/${{ inputs.build-type || 'debug' }}/*.apk
|
||||
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}-apk
|
||||
path: android/app/build/outputs/apk/${{ inputs.build-type }}/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}.apk
|
||||
retention-days: 14
|
||||
|
||||
- name: Upload AAB artifact
|
||||
if: inputs.output-format == 'aab'
|
||||
uses: https://github.com/actions/upload-artifact@v3
|
||||
with:
|
||||
name: android-release-aab
|
||||
path: android/app/build/outputs/bundle/release/*.aab
|
||||
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release-aab
|
||||
path: android/app/build/outputs/bundle/release/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release.aab
|
||||
retention-days: 14
|
||||
|
||||
- name: Upload Gradle build reports
|
||||
|
||||
Reference in New Issue
Block a user