Skip to content

Don't run duplicate build workflows on PRs and protect secrets#54

Merged
danielchalmers merged 4 commits intomainfrom
codex/remove-overlapping-pr-and-build-workflows
Nov 1, 2025
Merged

Don't run duplicate build workflows on PRs and protect secrets#54
danielchalmers merged 4 commits intomainfrom
codex/remove-overlapping-pr-and-build-workflows

Conversation

@danielchalmers
Copy link
Owner

Summary

  • disable signing by default in the full-build composite action to avoid requiring secrets unless explicitly enabled

Testing

  • not run (workflow-only change)

https://chatgpt.com/codex/tasks/task_e_69066d442ac083289cb4d6ecd8a4cb31

Removed description for ENABLE_SIGNING input.
Removed ENABLE_SIGNING option from full-build action.
@danielchalmers danielchalmers changed the title Set full-build action signing disabled by default Don't run duplicate build workflows on PRs and protect secrets Nov 1, 2025
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR refactors the Android build process to support conditional signing based on an ENABLE_SIGNING flag. The changes allow unsigned builds for development/CI workflows while maintaining signed builds for production deployments.

  • Introduced an ENABLE_SIGNING input parameter to control whether Android builds should be signed
  • Made signing-related inputs (RELEASE_KEYSTORE_BASE64 and RELEASE_KEYSTORE_PASS) optional instead of required
  • Split the Android build step into separate signed and unsigned build paths based on the signing flag

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File Description
.github/actions/full-build/action.yml Added ENABLE_SIGNING input, made keystore inputs optional, and implemented conditional build steps for signed vs unsigned builds
.github/workflows/deploy.yml Enabled signing for deployment workflow by passing ENABLE_SIGNING: true
.github/workflows/build.yml Removed signing-related secrets and simplified build workflow to only trigger on main branch; signing disabled by default

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

required: true
required: false
default: ""
ENABLE_SIGNING:
Copy link

Copilot AI Nov 1, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The ENABLE_SIGNING input is missing a description field. All inputs should have descriptive documentation to help users understand their purpose. Consider adding: description: 'Enable APK signing for production builds'

Suggested change
ENABLE_SIGNING:
ENABLE_SIGNING:
description: "Enable APK signing for production builds"

Copilot uses AI. Check for mistakes.
@danielchalmers danielchalmers merged commit b74fa8e into main Nov 1, 2025
7 checks passed
@danielchalmers danielchalmers deleted the codex/remove-overlapping-pr-and-build-workflows branch November 1, 2025 20:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants