main.yml

name: CCC CI

on:
  push:
    branches:
      - develop
  pull_request:

concurrency:
  group: ${{ github.ref }}
  cancel-in-progress: ${{ !contains(github.ref, 'develop')}}

env:
  BASE_URL_BACKEND: ${{ secrets.BASE_URL_BACKEND }}
  BASE_URL_API: ${{ secrets.BASE_URL_API }}
  BASE_URL_API_PREMIUM: ${{ secrets.BASE_URL_API_PREMIUM }}
  API_KEY_PREMIUM: ${{ secrets.API_KEY_PREMIUM }}
  ANDROID_KEY_STORE_PATH: ${{ secrets.ANDROID_KEY_STORE_PATH }}
  ANDROID_STORE_PASSWORD: ${{ secrets.ANDROID_STORE_PASSWORD }}
  ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
  ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
  RELEASE_ADVERTISEMENT_ID_GOOGLE: ${{ secrets.RELEASE_ADVERTISEMENT_ID_GOOGLE }}
  DEBUG_ADVERTISEMENT_ID_GOOGLE: ${{ secrets.DEBUG_ADVERTISEMENT_ID_GOOGLE }}
  RELEASE_ADVERTISEMENT_ID_HUAWEI: ${{ secrets.RELEASE_ADVERTISEMENT_ID_HUAWEI }}
  DEBUG_ADVERTISEMENT_ID_HUAWEI: ${{ secrets.DEBUG_ADVERTISEMENT_ID_HUAWEI }}
  GOOGLE_BANNER_AD_UNIT_ID_CALCULATOR_RELEASE: ${{ secrets.GOOGLE_BANNER_AD_UNIT_ID_CALCULATOR_RELEASE }}
  GOOGLE_BANNER_AD_UNIT_ID_SETTINGS_RELEASE: ${{ secrets.GOOGLE_BANNER_AD_UNIT_ID_SETTINGS_RELEASE }}
  GOOGLE_BANNER_AD_UNIT_ID_CURRENCIES_RELEASE: ${{ secrets.GOOGLE_BANNER_AD_UNIT_ID_CURRENCIES_RELEASE }}
  GOOGLE_INTERSTITIAL_AD_ID_RELEASE: ${{ secrets.GOOGLE_INTERSTITIAL_AD_ID_RELEASE }}
  GOOGLE_REWARDED_AD_UNIT_ID_RELEASE: ${{ secrets.GOOGLE_REWARDED_AD_UNIT_ID_RELEASE }}
  GOOGLE_BANNER_AD_UNIT_ID_CALCULATOR_DEBUG: ${{ secrets.GOOGLE_BANNER_AD_UNIT_ID_CALCULATOR_DEBUG }}
  GOOGLE_BANNER_AD_UNIT_ID_SETTINGS_DEBUG: ${{ secrets.GOOGLE_BANNER_AD_UNIT_ID_SETTINGS_DEBUG }}
  GOOGLE_BANNER_AD_UNIT_ID_CURRENCIES_DEBUG: ${{ secrets.GOOGLE_BANNER_AD_UNIT_ID_CURRENCIES_DEBUG }}
  GOOGLE_INTERSTITIAL_AD_ID_DEBUG: ${{ secrets.GOOGLE_INTERSTITIAL_AD_ID_DEBUG }}
  GOOGLE_REWARDED_AD_UNIT_ID_DEBUG: ${{ secrets.GOOGLE_REWARDED_AD_UNIT_ID_DEBUG }}
  HUAWEI_BANNER_AD_UNIT_ID_CALCULATOR_RELEASE: ${{ secrets.HUAWEI_BANNER_AD_UNIT_ID_CALCULATOR_RELEASE }}
  HUAWEI_BANNER_AD_UNIT_ID_SETTINGS_RELEASE: ${{ secrets.HUAWEI_BANNER_AD_UNIT_ID_SETTINGS_RELEASE }}
  HUAWEI_BANNER_AD_UNIT_ID_CURRENCIES_RELEASE: ${{ secrets.HUAWEI_BANNER_AD_UNIT_ID_CURRENCIES_RELEASE }}
  HUAWEI_INTERSTITIAL_AD_ID_RELEASE: ${{ secrets.HUAWEI_INTERSTITIAL_AD_ID_RELEASE }}
  HUAWEI_REWARDED_AD_UNIT_ID_RELEASE: ${{ secrets.HUAWEI_REWARDED_AD_UNIT_ID_RELEASE }}
  HUAWEI_BANNER_AD_UNIT_ID_CALCULATOR_DEBUG: ${{ secrets.HUAWEI_BANNER_AD_UNIT_ID_CALCULATOR_DEBUG }}
  HUAWEI_BANNER_AD_UNIT_ID_SETTINGS_DEBUG: ${{ secrets.HUAWEI_BANNER_AD_UNIT_ID_SETTINGS_DEBUG }}
  HUAWEI_BANNER_AD_UNIT_ID_CURRENCIES_DEBUG: ${{ secrets.HUAWEI_BANNER_AD_UNIT_ID_CURRENCIES_DEBUG }}
  HUAWEI_INTERSTITIAL_AD_ID_DEBUG: ${{ secrets.HUAWEI_INTERSTITIAL_AD_ID_DEBUG }}
  HUAWEI_REWARDED_AD_UNIT_ID_DEBUG: ${{ secrets.HUAWEI_REWARDED_AD_UNIT_ID_DEBUG }}
  APP_STORE_CONNECT_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_ISSUER_ID }}
  APP_STORE_CONNECT_KEY_CONTENT: ${{ secrets.APP_STORE_CONNECT_KEY_CONTENT }}
  APP_STORE_CONNECT_KEY_ID: ${{ secrets.APP_STORE_CONNECT_KEY_ID }}
  IOS_GOOGLE_FIREBASE_APP_ID: ${{ secrets.IOS_GOOGLE_FIREBASE_APP_ID }}
  FIREBASE_CLI_TOKEN: ${{ secrets.FIREBASE_CLI_TOKEN }}
  GIT_AUTHORIZATION: ${{ secrets.GIT_AUTHORIZATION }}
  SECRET_PASSWORD: ${{ secrets.SECRET_PASSWORD }}
  MATCH_PASSWORD: ${{ secrets.SECRET_PASSWORD }}
  SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
  FASTLANE_XCODEBUILD_SETTINGS_TIMEOUT: 5
  FASTLANE_XCODEBUILD_SETTINGS_RETRIES: 5
  CI: true

jobs:

  GradleBuild:
    runs-on: macos-14
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:

      - name: Setup Gradle Repo
        uses: Oztechan/Global/actions/setup-gradle-repo@d5c2d633506a792e53d7a273d90dde429df3bba7

      - name: Adding secret files
        uses: ./.github/actions/add-secret-files
        with:
          ANDROID_GPG_RELEASE_KEYSTORE: ${{ secrets.ANDROID_GPG_RELEASE_KEYSTORE }}
          SECRET_PASSWORD: ${{ secrets.SECRET_PASSWORD }}
          GOOGLE_SERVICES_JSON_ASC: ${{ secrets.GOOGLE_SERVICES_JSON_ASC }}
          AG_CONNECT_SERVICES_JSON_ASC: ${{ secrets.AG_CONNECT_SERVICES_JSON_ASC }}
          IOS_GPG_FIREBASE_CONFIG: ${{ secrets.IOS_GPG_FIREBASE_CONFIG }}
          IOS_GPG_RELEASE_XCCONFIG: ${{ secrets.IOS_GPG_RELEASE_XCCONFIG }}
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}

      - name: Assemble
        run: ./gradlew assemble

      - name: Upload Android Artifacts
        uses: actions/upload-artifact@v4.3.3
        if: github.event_name == 'push'
        with:
          name: androidArtifacts
          path: |
            android/app/build/outputs/apk/google/release/app-google-release.apk
            android/app/build/outputs/apk/huawei/release/app-huawei-release.apk

      - name: Cancel other jobs if this fails
        if: failure()
        uses: andymckay/cancel-action@0.5

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  DistributeAndroid:
    runs-on: ubuntu-22.04
    needs: [ GradleBuild ]
    if: github.event_name == 'push'
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:

      - name: Clone Repo # Needed for reading commit message for Firebase App Distribution
        uses: actions/checkout@v4.1.7

      - name: Download Android Artifacts
        uses: actions/download-artifact@v4.1.7
        with:
          name: androidArtifacts

      - name: Firebase App Distribution Google
        uses: wzieba/Firebase-Distribution-Github-Action@v1.7.0
        with:
          appId: ${{secrets.ANDROID_GOOGLE_FIREBASE_APP_ID}}
          token: ${{secrets.FIREBASE_CLI_TOKEN}}
          groups: QA
          file: google/release/app-google-release.apk

      - name: Firebase App Distribution Huawei
        uses: wzieba/Firebase-Distribution-Github-Action@v1.7.0
        with:
          appId: ${{secrets.ANDROID_HUAWEI_FIREBASE_APP_ID}}
          token: ${{secrets.FIREBASE_CLI_TOKEN}}
          groups: QA
          file: huawei/release/app-huawei-release.apk

      - name: Delete Android Artifacts
        uses: geekyeggo/delete-artifact@v5.0.0
        with:
          name: androidArtifacts

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  XCodeBuild:
    runs-on: macos-14
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:

      - name: Setup Gradle Repo
        uses: Oztechan/Global/actions/setup-gradle-repo@d5c2d633506a792e53d7a273d90dde429df3bba7

      - name: Adding secret files
        uses: ./.github/actions/add-secret-files
        with:
          ANDROID_GPG_RELEASE_KEYSTORE: ${{ secrets.ANDROID_GPG_RELEASE_KEYSTORE }}
          SECRET_PASSWORD: ${{ secrets.SECRET_PASSWORD }}
          GOOGLE_SERVICES_JSON_ASC: ${{ secrets.GOOGLE_SERVICES_JSON_ASC }}
          AG_CONNECT_SERVICES_JSON_ASC: ${{ secrets.AG_CONNECT_SERVICES_JSON_ASC }}
          IOS_GPG_FIREBASE_CONFIG: ${{ secrets.IOS_GPG_FIREBASE_CONFIG }}
          IOS_GPG_RELEASE_XCCONFIG: ${{ secrets.IOS_GPG_RELEASE_XCCONFIG }}
          GOOGLE_PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.GOOGLE_PLAY_SERVICE_ACCOUNT_JSON }}

      - name: Build
        working-directory: ios
        run: fastlane build

      - name: Upload iOS Artifacts
        uses: actions/upload-artifact@v4.3.3
        if: github.event_name == 'push'
        with:
          name: iOSArtifacts
          path: |
            ios/CCC.ipa
            ios/CCC.app.dSYM.zip

      - name: Cancel other jobs if this fails
        if: failure()
        uses: andymckay/cancel-action@0.5

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  DistributeIOS:
    runs-on: ubuntu-22.04
    needs: [ XCodeBuild ]
    if: github.event_name == 'push'
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:
      - name: Clone Repo
        uses: actions/checkout@v4.1.7

      - name: Download iOS IPA
        uses: actions/download-artifact@v4.1.7
        with:
          name: iOSArtifacts
          path: ios

      # was necessary to use chown to fix permission issues in linux machines
      - name: Distribute
        working-directory: ios
        run: |
          sudo chown -R $(whoami) /var/lib/gems/3.0.0
          fastlane distribute

      - name: Delete iOS IPA
        uses: geekyeggo/delete-artifact@v5.0.0
        with:
          name: iOSArtifacts

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  Check:
    runs-on: macos-14
    if: github.ref != 'refs/heads/develop'
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:

      - name: Setup Gradle Repo
        uses: Oztechan/Global/actions/setup-gradle-repo@d5c2d633506a792e53d7a273d90dde429df3bba7

      - name: Run Check
        run: ./gradlew check

      - name: Cancel other jobs if this fails
        if: failure()
        uses: andymckay/cancel-action@0.5

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  Coverage:
    runs-on: ubuntu-22.04
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:

      - name: Setup Gradle Repo
        uses: Oztechan/Global/actions/setup-gradle-repo@d5c2d633506a792e53d7a273d90dde429df3bba7

      - name: Generate Coverage
        run: ./gradlew koverXmlReport

      - name: Upload coverage to Codecov
        uses: codecov/codecov-action@v4.5.0
        with:
          token: ${{ secrets.CODECOV_TOKEN }}
          files: build/reports/kover/report.xml

      - name: Upload coverage to Codacy
        uses: codacy/codacy-coverage-reporter-action@v1.3.0
        with:
          project-token: ${{ secrets.CODACY_PROJECT_TOKEN }}
          coverage-reports: build/reports/kover/report.xml

      - name: SonarCloud Scan
        uses: sonarsource/sonarcloud-github-action@v2.3.0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
        with:
          args: >
            -Dsonar.organization=oztechan
            -Dsonar.projectKey=Oztechan_CCC
            -Dsonar.coverage.jacoco.xmlReportPaths=build/reports/kover/report.xml

      - name: Cancel other jobs if this fails
        if: failure()
        uses: andymckay/cancel-action@0.5

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  CodeAnalysis:
    runs-on: ubuntu-22.04
    outputs:
      status: ${{ steps.status.outputs.status }}
    steps:

      - name: Setup Gradle Repo
        uses: Oztechan/Global/actions/setup-gradle-repo@d5c2d633506a792e53d7a273d90dde429df3bba7

      - name: Detekt
        run: ./gradlew detektAll

      - name: SwiftLint
        uses: norio-nomura/action-swiftlint@3.2.1
        env:
          WORKING_DIRECTORY: ios
        with:
          args: --strict

      - name: Cancel other jobs if this fails
        if: failure()
        uses: andymckay/cancel-action@0.5

      - name: Set Job Status
        id: status
        run: echo "status=success" >> $GITHUB_OUTPUT

  Notify:
    runs-on: ubuntu-22.04
    needs: [ GradleBuild, XCodeBuild, Check, Coverage, CodeAnalysis, DistributeAndroid, DistributeIOS ]
    if: always()
    steps:

      - name: Notify slack fail
        if: false == (needs.GradleBuild.outputs.status == 'success') ||
          false == (needs.XCodeBuild.outputs.status == 'success') ||
          false == (needs.Check.outputs.status == 'success') ||
          false == (needs.Coverage.outputs.status == 'success') ||
          false == (needs.CodeAnalysis.outputs.status == 'success') ||
          (false == (needs.DistributeAndroid.outputs.status == 'success') && github.event_name == 'push') ||
          (false == (needs.DistributeIOS.outputs.status == 'success') && github.event_name == 'push')
        uses: voxmedia/github-action-slack-notify-build@v1.6.0
        with:
          channel: ccc-github
          status: FAILED
          color: danger