GH actions (EXPOSUREAPP-13085)

.github/ci-gradle.properties

@@ -0,0 +1,8 @@
+org.gradle.daemon=false
+org.gradle.caching=true
+org.gradle.parallel=true
+kotlin.incremental=false
+org.gradle.workers.max=2
+org.gradle.configureondemand=true
+kotlin.compiler.execution.strategy=in-process
+org.gradle.jvmargs=-Xmx5120m -XX:MaxMetaspaceSize=1536m -XX:+HeapDumpOnOutOfMemoryError

.github/workflows/ReleaseCandidate.yml

@@ -0,0 +1,217 @@
+name: Create Release Candidate
+
+on:
+  push:
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+*'
+
+env:
+  JVM_OPTS: -Xmx4096m
+  GRADLE_OPTS: |
+        -Xmx1536m -XX:+HeapDumpOnOutOfMemoryError
+        -Dorg.gradle.caching=true
+        -Dorg.gradle.configureondemand=true
+        -Dkotlin.compiler.execution.strategy=in-process
+        -Dkotlin.incremental=false  
+
+jobs:
+  dependencies:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Download sapmachine JDK 11
+      run: |
+        download_url="https://github.com/SAP/SapMachine/releases/download/sapmachine-11.0.14.1/sapmachine-jdk-11.0.14.1_linux-x64_bin.tar.gz"
+        wget -O "${RUNNER_TEMP}/sapmachine-jdk-11.tar.gz" "${download_url}"
+
+    - name: Setup sapmachine JDK 11
+      uses: actions/setup-java@v2
+      with:
+        distribution: 'jdkfile'
+        jdkFile: ${{ runner.temp }}/sapmachine-jdk-11.tar.gz
+        java-version: '11.0.14'
+        architecture: x64    
+        cache: 'gradle'
+
+    - uses: maxim-lobanov/setup-android-tools@v1
+      with:
+        cache: true   
+
+  quick_build_device_for_testers_signed:
+    runs-on: ubuntu-latest
+    needs: dependencies
+    env:
+      keystore_download_token: '${{ secrets.KEYSTORE_DOWNLOAD_TOKEN }}'
+      keystore_download_url: '${{ secrets.KEYSTORE_DOWNLOAD_URL }}'
+      keystore_download_filename: '${{ secrets.KEYSTORE_DOWNLOAD_FILENAME }}'
+      environments_download_url: '${{ secrets.ENVIRONMENTS_DOWNLOAD_URL }}'
+      env_prop_download_filename: '${{ secrets.ENV_PROP_DOWNLOAD_FILENAME }}'
+      keystore_filename: '${{ secrets.KEYSTORE_FILENAME }}'
+      keystore_encrypt_key: '${{ secrets.KEYSTORE_ENCRYPT_KEY }}'
+      keystore_password: '${{ secrets.KEYSTORE_PASSWORD }}'
+      key_alias: '${{ secrets.KEY_ALIAS }}'
+      key_password: '${{ secrets.KEY_PASSWORD }}'
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: Download sapmachine JDK 11
+        run: |
+          download_url="https://github.com/SAP/SapMachine/releases/download/sapmachine-11.0.14.1/sapmachine-jdk-11.0.14.1_linux-x64_bin.tar.gz"
+          wget -O "${RUNNER_TEMP}/sapmachine-jdk-11.tar.gz" "${download_url}"
+
+      - name: Setup sapmachine JDK 11
+        uses: actions/setup-java@v2
+        with:
+          distribution: 'jdkfile'
+          jdkFile: ${{ runner.temp }}/sapmachine-jdk-11.tar.gz
+          java-version: '11.0.14'
+          architecture: x64    
+          cache: 'gradle'
+
+      - uses: maxim-lobanov/setup-android-tools@v1
+        with:
+          cache: true   
+
+      - name: Download Keystore
+        run: |
+          curl --header "Authorization: token ${keystore_download_token}" --header "Accept: application/vnd.github.v3.raw" --remote-name --location "${keystore_download_url}${keystore_download_filename}"
+      - name: Download Environment Properties
+        run: |
+          curl --header "Authorization: token ${keystore_download_token}" --header "Accept: application/vnd.github.v3.raw" --remote-name --location "${environments_download_url}${env_prop_download_filename}"
+      - name: Decrypt Keystore
+        run: openssl enc -aes-256-cbc -d -pbkdf2 -iter 100000 -in $keystore_download_filename -out $keystore_filename -k $keystore_encrypt_key
+
+      - name: Prepare commit hash
+        run: |
+          echo $GITHUB_SHA  
+          echo "" >> "./gradle.properties"
+          echo "commit_hash=${GITHUB_SHA}" >> "./gradle.properties"         
+
+      - name: Prepare keystore properties for Signing
+        run: |
+          echo "" >> "./keystore.properties"
+          echo "deviceForTestersRelease.storePath=../${keystore_filename}" >> "./keystore.properties"
+          echo "deviceForTestersRelease.storePassword=${keystore_password}" >> "./keystore.properties"
+          echo "deviceForTestersRelease.keyAlias=${key_alias}" >> "./keystore.properties"
+          echo "deviceForTestersRelease.keyPassword=${key_password}" >> "./keystore.properties" 
+
+      - name: Quick Build
+        run: ./gradlew -PdisablePreDex :Corona-Warn-App:assembleDeviceForTestersRelease
+
+      - name: Archive apk
+        uses: actions/upload-artifact@v3
+        with:
+          path: Corona-Warn-App/build/outputs/apk/deviceForTesters/release/*.apk
+
+      - name: Send to T-System
+        env: 
+          tsystems_upload_url: '${{ secrets.TSYSTEM_UPLOAD_URL }}'
+          tsystems_upload_bearer: '${{ secrets.TSYSTEM_UPLOAD_BEARER }}'
+        run: |
+          fileName=$(find Corona-Warn-App/build/outputs/apk/deviceForTesters/release -name '*Corona-Warn-App*.apk')
+          curl --location --request POST $tsystems_upload_url \
+          --header "Authorization: Bearer $tsystems_upload_bearer" \
+          --form "file=@${fileName}" \
+          --form "camera=true"
+
+      - name: trigger App Automation Testing
+        env:
+          CIRCLE_API_ADMIN_TOKEN: '${{ secrets.CIRCLE_API_ADMIN_TOKEN }}'
+        run: |
+          curl -u ${CIRCLE_API_ADMIN_TOKEN}: \
+          -d '{"branch":"main","parameters":{"mobile-os":"android"}}' \
+          -H 'content-type: application/json' \
+          https://circleci.com/api/v2/project/github/corona-warn-app/cwa-app-automation/pipeline
+
+  firebase_screenshots:
+    runs-on: ubuntu-latest
+    needs: dependencies
+    env:
+      GCLOUD_SERVICE_KEY_BASE64: '${{ secrets.GCLOUD_SERVICE_KEY_BASE64 }}'
+      GOOGLE_PROJECT_ID: '${{ secrets.GOOGLE_PROJECT_ID }}'    
+    permissions:
+      checks: write
+      pull-requests: write
+    steps:
+
+      - uses: actions/checkout@v3
+
+      - name: Download sapmachine JDK 11
+        run: |
+          download_url="https://github.com/SAP/SapMachine/releases/download/sapmachine-11.0.14.1/sapmachine-jdk-11.0.14.1_linux-x64_bin.tar.gz"
+          wget -O "${RUNNER_TEMP}/sapmachine-jdk-11.tar.gz" "${download_url}"
+      - name: Setup sapmachine JDK 11
+        uses: actions/setup-java@v2
+        with:
+          distribution: 'jdkfile'
+          jdkFile: ${{ runner.temp }}/sapmachine-jdk-11.tar.gz
+          java-version: '11.0.14'
+          architecture: x64    
+          cache: 'gradle'
+
+      - uses: maxim-lobanov/setup-android-tools@v1
+        with:
+          cache: true   
+
+      - name: Build APKs for screenshots
+        run: ./gradlew -PdisablePreDex :Corona-Warn-App:assembleDebug :Corona-Warn-App:assembleAndroidTest
+
+      - name: Setup Google Cloud access        
+        run: |
+          echo $GCLOUD_SERVICE_KEY_BASE64 | base64 -di > ${HOME}/gcloud-service-key.json
+          sudo gcloud auth activate-service-account --key-file=${HOME}/gcloud-service-key.json
+          sudo gcloud --quiet config set project ${GOOGLE_PROJECT_ID}
+
+      - name: Setup Testlab environment
+        run: |
+          echo "BUCKETDIR=`date "+%Y-%m-%d-%H:%M:%S:%3N"`-${RANDOM}" >> $GITHUB_ENV
+      - name: Test with Firebase Test Lab
+        run: |
+          echo "Using bucketdir ${{ env.BUCKETDIR }}"
+          sudo gcloud firebase test android run \
+            --type instrumentation \
+            --app Corona-Warn-App/build/outputs/apk/deviceForTesters/debug/*.apk \
+            --test Corona-Warn-App/build/outputs/apk/androidTest/deviceForTesters/debug/*.apk \
+            --results-dir ${BUCKETDIR} \
+            --results-bucket ${GOOGLE_PROJECT_ID}-circleci-android \
+            --environment-variables clearPackageData=true \
+            --test-targets "annotation testhelpers.Screenshot" \
+            --timeout 20m \
+            --device-ids blueline \
+            --os-version-ids 28 \
+            --locales de_DE,en_US \
+            --orientations portrait \
+            --no-record-video
+
+      - name: Create directory to store test results
+        if: always()
+        run: mkdir mkdir firebase-screenshots
+
+      - name: Install gsutil dependency and copy test results data
+        if: always()
+        run: |
+          sudo pip install -U crcmod
+          sudo gsutil -m cp -R -U gs://${GOOGLE_PROJECT_ID}-circleci-android/${{ env.BUCKETDIR }}/blueline* mkdir firebase-screenshots
+
+      - name: Publish Firebase Test Results
+        uses: EnricoMi/publish-unit-test-result-action@v1
+        if: always()
+        with:
+          check_name: "Firebase Test Results"
+          files: "firebase-screenshots/**/*.xml" 
+
+      - name: Clean up pulled bucket
+        run: |
+          sudo rm -rf firebase-screenshots/*/test_cases
+          sudo rm -f firebase-screenshots/*/instrumentation.results
+          sudo rm -f firebase-screenshots/*/logcat
+          sudo rm -f firebase-screenshots/*/test_result_1.xml
+
+      - name: Archive Test Result
+        uses: actions/upload-artifact@v3
+        with:
+          name: screenshots
+          path: firebase-screenshots