beta.yml

# Copyright (c) 2022 Sharezone UG (haftungsbeschränkt)
# Licensed under the EUPL-1.2-or-later.
#
# You may obtain a copy of the Licence at:
# https://joinup.ec.europa.eu/software/page/eupl
#
# SPDX-License-Identifier: EUPL-1.2

name: beta

concurrency:
  # Our Android & iOS builds require unique build numbers. Therefore, we should
  # never build a new version while a build is already running. This is why we
  # use the branch name as a concurrency group. This way, we can only build one
  # version per branch at the same time.
  group: app-release

on:
  workflow_dispatch:
    inputs:
      ios-changelog:
        type: string
        description: |
          iOS changelog: Used for the App Store release notes. If the changelog 
          is not provided, the deployment for iOS will be skipped.
      # For web deployments, we don't have a changelog.
      deploy-web-app:
        type: boolean
        description: |
          Whether to deploy the web app. If this is set to false, the web
          deployment will be skipped.
      android-changelog:
        type: string
        description: |
          Android changelog: Used for the Google Play Store release notes. If the 
          changelog is not provided, the deployment for Android will be skipped.

# Set permissions to none.
#
# Using the broad default permissions is considered a bad security practice
# and would cause alerts from our scanning tools.
permissions: {}

jobs:
  deploy-ios:
    # We skip the deployment if no changelog is provided because we assume that
    # nothing has changed in the iOS app and therefore no new version is needed.
    if: github.event.inputs.ios-changelog != ''
    runs-on: macos-13
    timeout-minutes: 120
    steps:
      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac

      - name: Install Codemagic CLI Tools
        run: pip3 install codemagic-cli-tools==0.43.0

      - name: Set Flutter version from FVM config file to environment variables
        uses: kuhnroyal/flutter-fvm-config-action@6ffa30473b346f7d7c63cf9e03e6a886f940a72b

      - uses: subosito/flutter-action@48cafc24713cca54bbe03cdc3a423187d413aafa
        with:
          flutter-version: ${{ env.FLUTTER_VERSION }}
          channel: ${{ env.FLUTTER_CHANNEL }}
          # Use format expected by FVM.
          # Else this won't be recognized as an installed version when setting
          # '.../flutter' as the FVM Flutter version cache folder.
          cache-path: "${{ runner.tool_cache }}/flutter/:version:"

      - name: Install FVM
        run: |
          flutter pub global activate fvm 2.4.1
          fvm config --cache-path '${{ runner.tool_cache }}/flutter'

      - name: Install Sharezone Repo CLI
        run: |
          fvm flutter pub global activate --source path "$CI_CD_DART_SCRIPTS_PACKAGE_PATH"
          echo $(pwd)/bin >> $GITHUB_PATH

      - name: Deploy
        env:
          # The following secrets are used by the Codemagic CLI tool. It's important
          # to use the same names as the CLI tool expects.
          CERTIFICATE_PRIVATE_KEY: ${{ secrets.SHAREZONE_CERTIFICATE_PRIVATE_KEY }}
          APP_STORE_CONNECT_KEY_IDENTIFIER: ${{ secrets.SHAREZONE_APP_STORE_CONNECT_KEY_IDENTIFIER }}
          APP_STORE_CONNECT_ISSUER_ID: ${{ secrets.SHAREZONE_APP_STORE_CONNECT_ISSUER_ID }}
          APP_STORE_CONNECT_PRIVATE_KEY: ${{ secrets.SHAREZONE_APP_STORE_CONNECT_PRIVATE_KEY }}
        run: |
          sz deploy ios \
            --stage beta \
            --whats-new "${{ github.event.inputs.ios-changelog }}" \
            --export-options-plist=$HOME/export_options.plist

  deploy-web-app:
    if: github.event.inputs.deploy-web-app == 'true'
    runs-on: ubuntu-22.04
    steps:
      - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac

      - name: Set Flutter version from FVM config file to environment variables
        uses: kuhnroyal/flutter-fvm-config-action@6ffa30473b346f7d7c63cf9e03e6a886f940a72b

      - uses: subosito/flutter-action@48cafc24713cca54bbe03cdc3a423187d413aafa
        with:
          flutter-version: ${{ env.FLUTTER_VERSION }}
          channel: ${{ env.FLUTTER_CHANNEL }}
          # Use format expected by FVM.
          # Else this won't be recognized as an installed version when setting
          # '.../flutter' as the FVM Flutter version cache folder.
          cache-path: "${{ runner.tool_cache }}/flutter/:version:"

      - name: Install FVM
        run: |
          flutter pub global activate fvm 2.4.1
          fvm config --cache-path '${{ runner.tool_cache }}/flutter'

      - name: Install Sharezone Repo CLI
        run: |
          fvm flutter pub global activate --source path "$CI_CD_DART_SCRIPTS_PACKAGE_PATH"
          echo $(pwd)/bin >> $GITHUB_PATH

      - name: Install Firebase CLI
        run: sudo npm i -g firebase-tools@11.24.1

      - name: Build and deploy web-app
        env:
          SHAREZONE_PROD_KEY: ${{ secrets.FIREBASE_HOSTING_PROD_KEY }}
        run: |
          echo $SHAREZONE_PROD_KEY > sharezone-prod-key.json
          sz deploy web-app \
            --stage beta \
            --message "Workflow $GITHUB_JOB, commit $GITHUB_SHA" \
            --credentials sharezone-prod-key.json

  deploy-android:
    # We skip the deployment if no changelog is provided because we assume that
    # nothing has changed in the Android app and therefore no new version is needed.
    if: github.event.inputs.android-changelog != ''
    runs-on: ubuntu-22.04
    timeout-minutes: 120
    steps:
      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744

      - name: Install Codemagic CLI Tools
        run: pip3 install codemagic-cli-tools==0.43.0

      - name: Setup signing
        working-directory: app/android
        env:
          KEYSTORE_STRING: ${{ secrets.SHAREZONE_ANDROID_APP_KEYSTORE_STRING }}
          KEY_PASSWORD: ${{ secrets.SHAREZONE_ANDROID_APP_KEY_PASSWORD }}
          KEY_ALIAS: ${{ secrets.SHAREZONE_ANDROID_APP_KEY_ALIAS }}
          STORE_PASSWORD: ${{ secrets.SHAREZONE_ANDROID_APP_STORE_PASSWORD }}
        run: |
          echo $KEYSTORE_STRING | base64 -di > app/key.jks
          echo "storePassword=$STORE_PASSWORD" >> key.properties
          echo "keyPassword=$KEY_PASSWORD" >> key.properties
          echo "keyAlias=$KEY_ALIAS" >> key.properties
          echo "storeFile=key.jks" >> key.properties

      - name: Set Flutter version from FVM config file to environment variables
        uses: kuhnroyal/flutter-fvm-config-action@6ffa30473b346f7d7c63cf9e03e6a886f940a72b

      - uses: subosito/flutter-action@48cafc24713cca54bbe03cdc3a423187d413aafa
        with:
          flutter-version: ${{ env.FLUTTER_VERSION }}
          channel: ${{ env.FLUTTER_CHANNEL }}
          # Use format expected by FVM.
          # Else this won't be recognized as an installed version when setting
          # '.../flutter' as the FVM Flutter version cache folder.
          cache-path: "${{ runner.tool_cache }}/flutter/:version:"

      - name: Install FVM
        run: |
          flutter pub global activate fvm 2.4.1
          fvm config --cache-path '${{ runner.tool_cache }}/flutter'

      - name: Install Fastlane
        run: sudo gem install fastlane -v 2.214.0

      - name: Install Sharezone Repo CLI
        run: |
          fvm flutter pub global activate --source path "$CI_CD_DART_SCRIPTS_PACKAGE_PATH"
          echo $(pwd)/bin >> $GITHUB_PATH

      - name: Set up Google Play credentials
        env:
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.SHAREZONE_GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}
        working-directory: app/private_keys
        run: echo $GOOGLE_PLAY_SERVICE_ACCOUNT_JSON > google-play-gserviceaccount.json

      - name: Deploy
        run: |
          sz deploy android \
            --stage beta \
            --whats-new "${{ github.event.inputs.android-changelog }}"