Initial Release

src/io-utils.ts

@@ -0,0 +1,14 @@
+import {Dirent} from "fs";
+
+const path = require('path');
+const fs = require('fs');
+
+export function findReleaseFile(releaseDir: string): Dirent | undefined {
+    const releaseFiles = fs.readdirSync(releaseDir, {withFileTypes: true})
+        .filter(item => !item.isDirectory())
+        .filter(item => item.name.endsWith(".apk") || item.name.endsWith(".aab"));
+
+    if (releaseFiles.length > 0) {
+        return releaseFiles[0]
+    }
+}

src/main.ts

@@ -1,16 +1,48 @@
 import * as core from '@actions/core';
 import {wait} from './wait'
+import {signAabFile, signApkFile} from "./signing";
+const path = require('path');
+const fs = require('fs');
+const io = require('io-utils');
+const sign = require('signing');
 
 async function run() {
   try {
-    const ms = core.getInput('milliseconds');
-    console.log(`Waiting ${ms} milliseconds ...`)
+    const releaseDir = core.getInput('releaseDirectory');
+    const signingKeyBase64 = core.getInput('signingKeyBase64');
+    const alias = core.getInput('alias');
+    const keyStorePassword = core.getInput('keyStorePassword');
+    const keyPassword = core.getInput('keyPassword');
 
-    core.debug((new Date()).toTimeString())
-    await wait(parseInt(ms, 10));
-    core.debug((new Date()).toTimeString())
+    console.log(`Preparing to sign key @ ${releaseDir} with signing key`);
 
-    core.setOutput('time', new Date().toTimeString());
+    // 1. Find release file
+    const releaseFile = io.findReleaseFile(releaseDir);
+    if (releaseFile !== undefined) {
+      core.debug(`Found release to sign: ${releaseFile.name}`);
+
+      // 2. Now that we have a release file, decode and save the signing key
+      const signingKey = path.join(releaseDir, 'signingKey.jks');
+      fs.writeFileSync(signingKey, signingKeyBase64, 'base64');
+
+      // 3. Now zipalign the release file
+      const releaseFilePath = path.join(releaseDir, releaseFile.name);
+      let signedReleaseFile = '';
+      if (releaseFile.name.endsWith('.apk')) {
+        signedReleaseFile = await signApkFile(releaseFilePath, signingKey, alias, keyStorePassword, keyPassword);
+      } else if (releaseFile.name.endsWith('.aab')) {
+        signedReleaseFile = await signAabFile(releaseFilePath, signingKey, alias, keyStorePassword, keyPassword);
+      } else {
+        core.error('No valid release file to sign, abort.');
+        core.setFailed('No valid release file to sign.');
+      }
+
+      core.exportVariable("SIGNED_RELEASE_FILE", signedReleaseFile);
+      core.setOutput('signedReleaseFile', signedReleaseFile);
+    } else {
+      core.error("No release file (.apk or .aab) could be found. Abort.")
+      core.setFailed('No release file (.apk or .aab) could be found.');
+    }
   } catch (error) {
     core.setFailed(error.message);
   }

src/signing.ts

@@ -0,0 +1,53 @@
+import * as exec from '@actions/exec';
+import * as core from '@actions/core';
+
+export async function signApkFile(
+    apkFile: string,
+    signingKeyFile: string,
+    alias: string,
+    keyStorePassword: string,
+    keyPassword: string
+): Promise<string> {
+
+    core.debug("Zipaligning APK file");
+
+    // Align the apk file
+    const alignedApkFile = apkFile.replace('.apk', '-aligned.apk');
+    await exec.exec('zipalign', [
+        '-v', '-p 4',
+        apkFile,
+        alignedApkFile
+    ]);
+
+    core.debug("Signing APK file");
+
+    // apksigner sign --ks my-release-key.jks --out my-app-release.apk my-app-unsigned-aligned.apk
+    const signedApkFile = apkFile.replace('.apk', '-signed.apk');
+    await exec.exec('apksigner', [
+        'sign',
+        '--ks', signingKeyFile,
+        '--out', signedApkFile,
+        alignedApkFile
+    ]);
+
+    return signedApkFile
+}
+
+export async function signAabFile(
+    aabFile: string,
+    signingKeyFile: string,
+    alias: string,
+    keyStorePassword: string,
+    keyPassword: string
+): Promise<string> {
+    core.debug("Signing AAB file");
+    await exec.exec(`jarsigner`, [
+        '-keystore', signingKeyFile,
+        '-storepass', keyStorePassword,
+        '-keypass', keyPassword,
+        aabFile,
+        alias
+    ]);
+
+    return aabFile
+}