feat(workflows): aggiungi check pacchetti obsoleti e migliora audit sicurezza

- aggiungi workflow separato per controllo dipendenze obsolete
- aggiorna maintenance.yml per distinguere tra audit sicurezza e check obsolete
- aggiorna nomi e struttura dei job per maggiore chiarezza
- carica artifact Android con nome versione dinamico
- separa issue sicurezza da quelle di pacchetti obsoleti in CI
- migliora trigger per job di manutenzione periodica【workflows】
This commit is contained in:
LucaZanni
2026-04-07 11:59:30 +02:00
parent eac0873d9a
commit edb33df3b8
5 changed files with 136 additions and 30 deletions
+26 -4
View File
@@ -78,6 +78,12 @@ jobs:
echo "@pzeta:registry=https://gitea.pzetatouch.it/api/packages/pzeta_touch/npm/" >> ~/.npmrc
echo "//gitea.pzetatouch.it/api/packages/pzeta_touch/npm/:_authToken=${{ secrets.NPM_TOKEN }}" >> ~/.npmrc
- name: Read app info from package.json
id: app-info
run: |
echo "name=$(node -e \"console.log(require('./package.json').name)\")" >> $GITHUB_OUTPUT
echo "version=$(node -e \"console.log(require('./package.json').version)\")" >> $GITHUB_OUTPUT
- name: Install dependencies
run: npm ci
@@ -112,6 +118,15 @@ jobs:
./gradlew assembleDebug
fi
- name: Rename APK
if: inputs.output-format == 'apk'
run: |
APP="${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}"
APK_DIR="android/app/build/outputs/apk/${{ inputs.build-type }}"
mv "$APK_DIR"/app-${{ inputs.build-type }}.apk "$APK_DIR/${APP}.apk" 2>/dev/null || \
mv "$APK_DIR"/app-${{ inputs.build-type }}-unsigned.apk "$APK_DIR/${APP}.apk" 2>/dev/null || \
find "$APK_DIR" -name "*.apk" ! -name "${APP}.apk" -exec mv {} "$APK_DIR/${APP}.apk" \;
- name: Build Android (AAB)
if: inputs.output-format == 'aab'
working-directory: android
@@ -121,20 +136,27 @@ jobs:
KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
run: ./gradlew bundleRelease
- name: Rename AAB
if: inputs.output-format == 'aab'
run: |
APP="${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release"
AAB_DIR="android/app/build/outputs/bundle/release"
find "$AAB_DIR" -name "*.aab" ! -name "${APP}.aab" -exec mv {} "$AAB_DIR/${APP}.aab" \;
- name: Upload APK artifact
if: inputs.output-format == 'apk'
uses: https://github.com/actions/upload-artifact@v3
with:
name: android-${{ inputs.build-type || 'debug' }}-apk
path: android/app/build/outputs/apk/${{ inputs.build-type || 'debug' }}/*.apk
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}-apk
path: android/app/build/outputs/apk/${{ inputs.build-type }}/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-${{ inputs.build-type }}.apk
retention-days: 14
- name: Upload AAB artifact
if: inputs.output-format == 'aab'
uses: https://github.com/actions/upload-artifact@v3
with:
name: android-release-aab
path: android/app/build/outputs/bundle/release/*.aab
name: ${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release-aab
path: android/app/build/outputs/bundle/release/${{ steps.app-info.outputs.name }}-${{ steps.app-info.outputs.version }}-release.aab
retention-days: 14
- name: Upload Gradle build reports