Improve reproducibility #21

	name: Release APK

	on: push

	permissions:
	id-token: write
	attestations: write
	contents: write

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	submodules: true

	- name: Set up Go
	uses: actions/[email protected]
	with:
	go-version: '1.22'

	- name: Set up JDK 17
	uses: actions/setup-java@v3
	with:
	java-version: '17'
	distribution: 'temurin'

	- name: Set up Android SDK
	uses: android-actions/setup-android@v3

	- name: Set up NDK
	id: setup_ndk
	uses: nttld/setup-ndk@v1
	with:
	ndk-version: r26d
	add-to-path: false

	- name: Compile Go libs
	run: \|
	pushd 'app/src'
	./build.sh
	popd
	env:
	ANDROID_NDK_HOME: ${{ steps.setup_ndk.outputs.ndk-path }}

	- name: Build with Gradle
	run: ./gradlew --no-daemon assembleRelease

	- name: Sign APK
	id: sign_app
	uses: r0adkll/sign-android-release@v1
	with:
	releaseDirectory: app/build/outputs/apk/release
	signingKeyBase64: ${{ secrets.SIGNING_KEY }}
	keyStorePassword: ${{ secrets.KEY_STORE_PASSWORD }}
	alias: ${{ secrets.ALIAS }}
	env:
	BUILD_TOOLS_VERSION: "34.0.0"

	- name: Upload artifact
	uses: actions/upload-artifact@v4
	with:
	name: Signed app bundle
	path: ${{steps.sign_app.outputs.signedReleaseFile}}

	- name: Attest APK
	uses: actions/attest-build-provenance@v1
	with:
	subject-path: ${{steps.sign_app.outputs.signedReleaseFile}}

	- name: Upload release files
	uses: softprops/action-gh-release@v2
	if: startsWith(github.ref, 'refs/tags/')
	with:
	files: ${{steps.sign_app.outputs.signedReleaseFile}}

Provide feedback