Android: Build with Gradle, Subscribe with Maven

Question

Android: Build with Gradle, Subscribe with Maven

My android build works fine in continuous integration mode except androidSigning: Gradle can let the developer catch the keystore path and passwords in a clear way. This is unsatisfactory.

1 Do you have a workaround? Such as encrypting passwords ... 2- My idea is now to build with Gradle, and sign and zipalign with Maven.

I currently manage to subscribe to an existing apk, but cannot zipalign the signed apk. Here is the pom.xml located in the application folder :

<profiles>
    <profile>
        <id>sign</id>
        <build>
            <plugins>

                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-jarsigner-plugin</artifactId>
                    <version>1.4</version>
                    <executions>
                        <execution>
                            <id>signing</id>
                            <goals>
                                <goal>sign</goal>
                            </goals>

                            ... all parameters ok...

                        </execution>
                    </executions>
                </plugin>


                <plugin>
                    <groupId>com.jayway.maven.plugins.android.generation2</groupId>
                    <artifactId>android-maven-plugin</artifactId>
                    <version>3.8.2</version>
                    <inherited>true</inherited>
                    <configuration>
                        <sign>
                            <debug>false</debug>
                        </sign>
                        <zipalign>
                            <verbose>true</verbose>
                            <inputApk>${apk.build.directory}/app-release-unsigned.apk</inputApk>
                            <outputApk>${apk.build.directory}/app-release-signed-aligned.apk</outputApk>
                            <skip>false</skip>
                        </zipalign>
                    </configuration>
                    <executions>
                        <execution>
                            <id>alignApk</id>
                            <phase>package</phase>
                            <goals>
                                <goal>zipalign</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>

            </plugins>
        </build>
    </profile>
</profiles>

results

[INFO] --- maven-jarsigner-plugin:1.4:sign (signing) @ mavensigning ---
[INFO] 1 archive(s) traitées
[INFO] 
[INFO] --- android-maven-plugin:3.8.2:zipalign (alignApk) @ mavensigning ---
[INFO] Skipping zipalign on pom