Skip to content

Commit 382ad2e

Browse files
author
Snapify Developer
committed
refactor: Extract secrets dynamically from build.gradle.kts
1 parent 42ed666 commit 382ad2e

1 file changed

Lines changed: 21 additions & 7 deletions

File tree

generate_secrets.sh

Lines changed: 21 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -63,10 +63,24 @@ if command -v gh &> /dev/null; then
6363
fi
6464

6565
# Set Template Defaults for Passwords/Alias
66-
# These match the generated keystore and build.gradle.kts defaults
67-
echo "relyo1ugzvugfh48ieuqyw==" | gh secret set STORE_PASSWORD
68-
echo "relyo1ugzvugfh48ieuqyw==" | gh secret set KEY_PASSWORD
69-
echo "ko_key" | gh secret set KEY_ALIAS
66+
# Extract from app/build.gradle.kts to avoid hardcoding in script
67+
# We look for lines like: project.properties["keyAlias"] as? String ?: "ko_key"
68+
69+
GRADLE_FILE="app/build.gradle.kts"
70+
71+
# Extract default values using grep/sed
72+
DEFAULT_STORE_PASS=$(grep 'properties\["storePassword"\]' "$GRADLE_FILE" | sed -n 's/.*?: "\(.*\)"/\1/p')
73+
DEFAULT_KEY_PASS=$(grep 'properties\["keyPassword"\]' "$GRADLE_FILE" | sed -n 's/.*?: "\(.*\)"/\1/p')
74+
DEFAULT_KEY_ALIAS=$(grep 'properties\["keyAlias"\]' "$GRADLE_FILE" | sed -n 's/.*?: "\(.*\)"/\1/p')
75+
76+
# Fallback if parsing fails (though it shouldn't with standard template)
77+
: "${DEFAULT_STORE_PASS:=RElyO1UGZvuGFh48IEuqYw==}"
78+
: "${DEFAULT_KEY_PASS:=RElyO1UGZvuGFh48IEuqYw==}"
79+
: "${DEFAULT_KEY_ALIAS:=ko_key}"
80+
81+
echo "$DEFAULT_STORE_PASS" | gh secret set STORE_PASSWORD
82+
echo "$DEFAULT_KEY_PASS" | gh secret set KEY_PASSWORD
83+
echo "$DEFAULT_KEY_ALIAS" | gh secret set KEY_ALIAS
7084
echo "✅ Uploaded STORE_PASSWORD, KEY_PASSWORD, KEY_ALIAS (Template Defaults)."
7185
else
7286
echo "⚠️ GitHub CLI is installed but not logged in. Run 'gh auth login' to enable auto-upload."
@@ -80,6 +94,6 @@ echo "================================="
8094
echo "Instructions (if upload failed):"
8195
echo "1. Open '$KEYSTORE_DST' -> Copy content -> GitHub Secret 'KEYSTORE_B64'"
8296
echo "2. Open '$GOOGLE_JSON_DST' -> Copy content -> GitHub Secret 'GOOGLE_SERVICES_JSON_B64'"
83-
echo "3. Set 'STORE_PASSWORD' = 'RElyO1UGZvuGFh48IEuqYw=='"
84-
echo "4. Set 'KEY_PASSWORD' = 'RElyO1UGZvuGFh48IEuqYw=='"
85-
echo "5. Set 'KEY_ALIAS' = 'ko_key'"
97+
echo "3. Set 'STORE_PASSWORD' = Check app/build.gradle.kts"
98+
echo "4. Set 'KEY_PASSWORD' = Check app/build.gradle.kts"
99+
echo "5. Set 'KEY_ALIAS' = Check app/build.gradle.kts"

0 commit comments

Comments
 (0)