Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 34 additions & 0 deletions .github/workflows/android-ci.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
name: Gradle CI

on:
push:
pull_request:

jobs:
build:
runs-on: ubuntu-latest
permissions:
contents: read
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The job-level permissions restrict GITHUB_TOKEN to contents: read, but actions/upload-artifact typically requires actions: write to create artifacts. As written, the upload step is likely to fail with a permissions error; add actions: write (or remove the restrictive permissions block) so artifact upload works while still keeping least-privilege.

Suggested change
contents: read
contents: read
actions: write

Copilot uses AI. Check for mistakes.

steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Set up JDK 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'

- name: Setup Gradle
uses: gradle/actions/setup-gradle@v4
Copy link

Copilot AI Apr 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

gradle/actions/setup-gradle is referenced as @v4 here, but the existing workflow pins this action to a specific commit (see .github/workflows/gradle-publish.yml), which reduces supply-chain risk. Please pin gradle/actions/setup-gradle to a commit SHA (optionally with a comment noting the version) for consistency with the repository’s workflow conventions.

Suggested change
uses: gradle/actions/setup-gradle@v4
uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4

Copilot uses AI. Check for mistakes.

- name: Build debug APK
run: ./gradlew assembleDebug

- name: Upload APK artifacts
uses: actions/upload-artifact@v4
with:
name: apk-debug
path: app/build/outputs/apk/debug/*.apk
if-no-files-found: error
Loading