release secrets

.github/workflows/release.yml

@@ -24,9 +24,6 @@ jobs:
           cat gradle.backup.properties | grep -v configuration-cache > gradle.properties
       - name: Deploy to Sonatype
         run: ./gradlew publish
-        env:
-          ORG_GRADLE_PROJECT_mavenCentralUsername: ${{ secrets.SONATYPE_NEXUS_USERNAME }}
-          ORG_GRADLE_PROJECT_mavenCentralPassword: ${{ secrets.SONATYPE_NEXUS_PASSWORD }}
       - name: Build AAB & APK
         run: |
           ./gradlew :demo:bundleRelease :demo:assembleRelease

release/.gitignore

@@ -0,0 +1,2 @@
+/secring.gpg
+/signing.properties

release/signing-cleanup.sh

@@ -0,0 +1,2 @@
+rm -f release/*.gpg
+rm -f release/*.properties

release/signing-pack.sh

@@ -0,0 +1,10 @@
+read -sp "Enter the encrypt key: " ENCRYPT_KEY
+echo
+
+if [[ -n "$ENCRYPT_KEY" ]]; then
+  openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/secring.gpg -out release/secring.gpg.aes -k ${ENCRYPT_KEY}
+  openssl enc -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/signing.properties -out release/signing.properties.aes -k ${ENCRYPT_KEY}
+
+else
+  echo "Encrypt key is empty"
+fi

release/signing-unpack.sh

@@ -0,0 +1,10 @@
+read -sp "Enter the encrypt key: " ENCRYPT_KEY
+echo
+
+if [[ -n "$ENCRYPT_KEY" ]]; then
+  openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/secring.gpg.aes -out release/secring.gpg -k ${ENCRYPT_KEY}
+  openssl enc -d -aes-256-cbc -md sha512 -pbkdf2 -iter 100000 -salt -in release/signing.properties.aes -out release/signing.properties -k ${ENCRYPT_KEY}
+
+else
+  echo "Encrypt key is empty"
+fi

release/signing.properties.aes

@@ -0,0 +1,3 @@
+Salted__a��$��7���+����T��o�/b
+��[��y��W�?Uե���M��.�':)�"���D�RU�����3���Gm�7�1�L|�@F�/�L��o�D�\�x뒬�DЗ=�u�<Q
+�8�P�����Sn-������(H�2L�6�!a����l�ȫ�HiB^Uf�����7�ȭ���n�Zh��H�!�(LT��^�!�a;ӱ��"}5����u�Ĕ���6��2����x�
�A���e�U!