added signing

Author: doudar

.github/workflows/build.yml

@@ -170,6 +170,23 @@ jobs:
           envsubst < lib/config/env.local.dart > lib/config/env.local.dart.tmp
           mv lib/config/env.local.dart.tmp lib/config/env.local.dart
 
+      - name: Configure Android signing
+        env:
+          SIGNING_KEY: ${{ secrets.SIGNING_KEY }}
+          KEY_STORE_PASSWORD: ${{ secrets.KEY_STORE_PASSWORD }}
+          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
+          KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }}
+        run: |
+          if [ -z "$SIGNING_KEY" ]; then
+            echo "No signing key provided; using debug signing."
+            exit 0
+          fi
+          echo "$SIGNING_KEY" | base64 -d > android/app/release-key.jks
+          echo "KEYSTORE_PATH=$PWD/android/app/release-key.jks" >> $GITHUB_ENV
+          echo "KEY_STORE_PASSWORD=$KEY_STORE_PASSWORD" >> $GITHUB_ENV
+          echo "KEY_ALIAS=$KEY_ALIAS" >> $GITHUB_ENV
+          echo "KEY_PASSWORD=$KEY_PASSWORD" >> $GITHUB_ENV
+
       - name: Build Android APK
         run: flutter build apk --no-tree-shake-icons
 

.gitignore

@@ -95,3 +95,4 @@ ios/**/DerivedData/
 test/*.fit
 test/*.gpx
 android/build/reports/problems/problems-report.html
+android/build/reports/problems/problems-report.html

android/app/build.gradle

@@ -22,6 +22,12 @@ if (flutterVersionName == null) {
     flutterVersionName = '1.0'
 }
 
+// Release signing pulled from environment so CI can provide secrets without committing keystore.
+def releaseStoreFile = System.getenv('KEYSTORE_PATH')
+def releaseStorePassword = System.getenv('KEY_STORE_PASSWORD')
+def releaseKeyAlias = System.getenv('KEY_ALIAS')
+def releaseKeyPassword = System.getenv('KEY_PASSWORD')
+
 android {
     namespace "com.example.ss2kconfigapp"
     compileSdkVersion 36  // Updated to support audioplayers_android requirements
@@ -59,11 +65,25 @@ android {
         versionName flutterVersionName
     }
 
+    signingConfigs {
+        release {
+            if (releaseStoreFile && releaseStorePassword && releaseKeyAlias && releaseKeyPassword) {
+                storeFile file(releaseStoreFile)
+                storePassword releaseStorePassword
+                keyAlias releaseKeyAlias
+                keyPassword releaseKeyPassword
+            }
+        }
+    }
+
     buildTypes {
         release {
-            // TODO: Add your own signing config for the release build.
-            // Signing with the debug keys for now, so `flutter run --release` works.
-            signingConfig signingConfigs.debug
+            // Use CI-provided signing when available; fall back to debug for local convenience.
+            if (releaseStoreFile && releaseStorePassword && releaseKeyAlias && releaseKeyPassword) {
+                signingConfig signingConfigs.release
+            } else {
+                signingConfig signingConfigs.debug
+            }
 
             minifyEnabled true
             shrinkResources true