diff --git a/.taskcluster.yml b/.taskcluster.yml index b19235780..968ad0c14 100644 --- a/.taskcluster.yml +++ b/.taskcluster.yml @@ -43,6 +43,7 @@ tasks: - queue:scheduler-id:${scheduler_id} - queue:create-task:highest:aws-provisioner-v1/${build_worker_type} - project:mobile:fenix:releng:signing:format:autograph_apk + - secrets:get:project/mobile/fenix/sentry - $if: is_mozilla_mobile_repo then: - queue:create-task:highest:scriptworker-prov-v1/mobile-signing-v1 diff --git a/automation/taskcluster/decision_task_nightly.py b/automation/taskcluster/decision_task_nightly.py index de68b9578..9b8ab0892 100644 --- a/automation/taskcluster/decision_task_nightly.py +++ b/automation/taskcluster/decision_task_nightly.py @@ -40,12 +40,18 @@ def generate_build_task(apks, is_staging): return taskcluster.slugId(), BUILDER.build_task( name="(Fenix) Build task", description="Build Fenix from source code.", - command='cd .. && {} && ./gradlew --no-daemon clean test assembleRelease'.format(checkout), + command=('cd .. && ' + checkout + + ' && python automation/taskcluster/helper/get-secret.py' + ' -s project/mobile/fenix/sentry -k dsn -f .sentry_token' + ' && ./gradlew --no-daemon -PcrashReports=true clean test assembleRelease'), features={ "chainOfTrust": True }, artifacts=artifacts, worker_type='android-components-g' if is_staging else 'gecko-focus', + scopes=[ + "secrets:get:project/mobile/fenix/sentry" + ] )