Samsung_KernelSU_SUSFS/.github/workflows/main.yml

name: Build Kernels

permissions:
  contents: write
  actions: write

on:
  workflow_dispatch:
    inputs:
      release_type:
        description: "Choose Release Type"
        required: true
        type: choice
        options:
          - Actions
          - Pre-Release
          - Release
        default: Actions

jobs:

  build-samsung:
    uses: ./.github/workflows/kernel-samsung.yml
    secrets: inherit

  release:
    runs-on: ubuntu-latest
    if: inputs.release_type != 'Actions'
    needs:
      - build-samsung

    env:
      GH_TOKEN: ${{ github.token }}
      RELEASE_NAME: "Samsung GKI Kernels With WKSU v3.0.0 & SUSFS v2.0.0"
      RELEASE_BODY: ""
    steps:
      - name: Download Apache Arrow's util_free_space.sh
        run: |
          curl -L -o util_free_space.sh https://raw.githubusercontent.com/apache/arrow/main/ci/scripts/util_free_space.sh
          chmod +x util_free_space.sh
          ./util_free_space.sh
      
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Generate New Tag
        if: inputs.release_type != 'Actions'
        run: |
            LATEST_TAG=$(gh api repos/${{ github.repository }}/tags --jq '.[0].name' 2>/dev/null || echo "")
            if [ -z "$LATEST_TAG" ]; then
              LATEST_TAG="v2.0.0-r0"
            fi
            
            NEW_TAG=$(echo "$LATEST_TAG" | awk -F'-r' '{suffix=$2; if (!suffix) suffix=0; suffix++; printf "%s-r%d", $1, suffix}')
    
            echo "New tag: $NEW_TAG"
            echo "NEW_TAG=${NEW_TAG}" >> $GITHUB_ENV

      - name: Download Artifacts
        uses: actions/download-artifact@v5
        with:
          path: ./downloaded-artifacts
          pattern: '*-AnyKernel3'

      - name: Set release body
        run: |
          cat << 'EOF' > release_body.md
      
          **IMPORTANT DISCLAIMER**
          This software is provided for testing and educational purposes only. Use at your own risk.
          The developers are not responsible for any damage, data loss, or issues that may occur.
          Please ensure you have proper backups before installation.

          Features:
          -> Wild KSU Manager Support, Also Compatible with KernelSU-Next Manager
          -> SUSFS ඞ v2.0.0
          -> SUSFS Inline hooks
          -> BBG: https://github.com/vc-teahouse/Baseband-guard
          -> KPN: Added support for KernelPatch-Next.

          🔹 BBG (Baseband-guard)
          - A lightweight LSM (Linux Security Module) for Android kernel
          - Blocks unauthorized writes to critical partitions/device nodes
          - Prevents malicious tampering with baseband and boot chain
          - Kernel-level protection via LSM hooks
          - Reduces risk of soft-brick/hard-brick issues

          Notes:
          - The only modifications to Samsung Kernels at this time are WKSU and SUSFS. Everything else is left at default settings.
          
          Module: 
          -> https://github.com/sidex15/ksu_module_susfs
      
          Managers:
          -> WKSU: https://github.com/WildKernels/Wild_KSU
          -> Next: https://github.com/KernelSU-Next/KernelSU-Next
          EOF

      - name: Create GitHub Release
        uses: softprops/action-gh-release@v2
        with:
          tag_name: ${{ env.NEW_TAG }}
          prerelease: ${{ inputs.release_type == 'Pre-Release' }}
          files: ""
          name: ${{ env.RELEASE_NAME }}
          body_path: release_body.md

      - name: Upload Release Assets
        run: |
          shopt -s nullglob
          anykernel_dirs=(./downloaded-artifacts/*/)
          if [ ${#anykernel_dirs[@]} -eq 0 ]; then
            echo "No artifact directories found under ./downloaded-artifacts; skipping upload."
          else
            for dir in "${anykernel_dirs[@]}"; do
              # Check if this is an AnyKernel3 artifact directory
              if [[ "$(basename "$dir")" == *"-AnyKernel3" ]]; then
                artifact_name=$(basename "$dir")
                echo "Creating ZIP for $artifact_name..."
                # Navigate into the directory and zip its contents directly
                cd "$dir"
                zip -r -9 "../../${artifact_name}.zip" ./*
                cd - > /dev/null
                echo "Uploading ${artifact_name}.zip..."
                gh release upload ${{ env.NEW_TAG }} "${artifact_name}.zip"
              fi
            done
          fi
            
#      - name: Send Telegram Notification
#        if: inputs.release_type != 'Actions'
#        run: |
#          RELEASE_TYPE_TEXT=""
#          if [ "${{ inputs.release_type }}" == "Pre-Release" ]; then
#            RELEASE_TYPE_TEXT="🧪 *Pre-Release*"
#          else
#            RELEASE_TYPE_TEXT="🚀 *Release*"
#          fi
#          
#          curl -X POST "https://api.telegram.org/bot${{ secrets.TELEGRAM_BOT_TOKEN }}/sendMessage" \
#            -F chat_id="${{ secrets.TELEGRAM_CHAT_ID }}" \
#            -F message_thread_id="${{ secrets.TELEGRAM_TOPIC_ID_GKI }}" \
#            -F text="
#            🌽 *New Kernel $RELEASE_TYPE_TEXT Uploaded*  
#            📦 *Repository:* [${{ github.repository }}](https://github.com/${{ github.repository }})  
#            ✏️ *Commit:* [${{ github.sha }}](https://github.com/${{ github.repository }}/commit/${{ github.sha }})  
#            [🔗 View GitHub Release](https://github.com/${{ github.repository }}/releases/tag/${{ env.NEW_TAG }})" \
#            -F parse_mode="Markdown"