Mobile DevOps with GitLab, Part 2 - Code signing for Android with GitLab
Sep 28, 2022Darby Frey

Summary
This post details the technical steps for generating an Android Keystore file using `keytool`, configuring `app/build.gradle` to use environment variables for signing configurations, and setting up CI variables in GitLab. It also provides a sample `.gitlab-ci.yml` file that uses the `glab` CLI to download secure files and execute the Android build process.
More from the GitLab Secrets Manager trail
- GitLab Secrets Manager adds ESO, Terraform, API support
- Manage CI/CD credentials with GitLab Secrets Manager
- A leaked personal access token shouldn't expose every project its owner can reach. Fine-grained PATs scope each token’s permissions to the job.
- Solving complex challenges with GitLab Duo Workflow
- How to scan a full commit history to detect sensitive secrets