jwinterm 1e4af3dbde CI: drop pull_request triggers (Gitea strips secrets from fork PRs) ...

The Android workflow's 'ANDROID_KEYSTORE_BASE64 not set' failure is
secrets-not-reaching-runner, not a missing secret. The secret IS set
in Builds/hash-wallet's repo secrets. The issue: workflows are being
triggered by 'pull_request' events when github-such-software/hash-wallet
is mirrored into Builds/hash-wallet via PR. Gitea (and GitHub) Actions
deliberately strip secrets from workflows triggered by PRs from forks
to prevent rogue PRs from exfiltrating secrets.

Fix: drop the pull_request trigger from all auto-build workflows. Each
workflow now runs exactly once, on push to dev/main (post-merge), in
the destination repo's context, with secrets intact.

Also added a debug step in the Android keystore decode that prints
secret LENGTHS (never values) so future failures of this shape are
diagnosable immediately.

2026-05-19 07:54:09 -04:00

..

build-android.yml

CI: drop pull_request triggers (Gitea strips secrets from fork PRs)

2026-05-19 07:54:09 -04:00

build-ios-sim.yml

CI: drop pull_request triggers (Gitea strips secrets from fork PRs)

2026-05-19 07:54:09 -04:00

build-ios-testflight.yml

CI: install Go + gomobile if missing (for BitBox Flutter iOS bindings)

2026-05-19 07:50:02 -04:00

build-linux.yml

CI: drop pull_request triggers (Gitea strips secrets from fork PRs)

2026-05-19 07:54:09 -04:00