Files
pezkuwi-wallet-android/.github/workflows/pull_request.yml
T
Satoshi Qazi Muhammed 77314c8901 ci: restrict default GITHUB_TOKEN permissions to contents: read
None of these workflows write through GITHUB_TOKEN: artifact upload,
Firebase, S3, Play Store, gh-pages and the Appium dispatch all use their
own credentials. Reusable workflows they call inherit the same cap.
2026-10-02 21:16:56 +04:00

26 lines
781 B
YAML

name: Pull request
on:
pull_request:
workflow_dispatch:
inputs:
branch:
description: 'Branch to build and test (manual escape hatch for when pull_request-triggered CI does not fire)'
required: true
default: 'main'
type: string
permissions:
contents: read
jobs:
test:
uses: pezkuwichain/pezkuwi-wallet-android/.github/workflows/android_build.yml@main
with:
branch: ${{ github.event_name == 'workflow_dispatch' && inputs.branch || github.head_ref }}
gradlew-command: assembleDevelop
keystore-file-name: develop_key.jks # develop variant is signed with signingConfigs.dev (develop_key.jks)
build-debug-tests: false # TODO: Enable this, when debug build will be fixed for tests
secrets: inherit