diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 8b137891..2596908b 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -1 +1,35 @@
+name: Publish APK
 
+on:
+  pull_request:
+    branches: [test-deploy]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container: lbry/android-base:platform-28
+    steps:
+      - name: checkout
+        uses: actions/checkout@v3
+      - name: hacky copy # docker image runs ~ as /root, but github actions uses ~=/github/home
+        run: | 
+          cp -r /root/.buildozer ~/.buildozer/
+      - name: setup
+        run: |
+          echo "$PGP_PRIVATE_KEY" | gpg --batch --import
+          echo 'deb https://gitsecret.jfrog.io/artifactory/git-secret-deb git-secret main' >> /etc/apt/sources.list
+          wget -qO - 'https://gitsecret.jfrog.io/artifactory/api/gpg/key/public' | apt-key add -
+          apt-get -y update && apt-get -y install build-essential ca-certificates curl git gpg-agent openjdk-8-jdk software-properties-common wget zipalign git-secret
+          git secret reveal
+          chmod u+x $GITHUB_WORKSPACE/gradlew
+          export BUILD_VERSION=$($GITHUB_WORKSPACE/gradlew -p $GITHUB_WORKSPACE -q printVersionName --console=plain | tail -1)
+          echo $BUILD_VERSION
+        env:
+          PGP_PRIVATE_KEY: ${{ secrets.PGP_PRIVATE_KEY }}
+          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
+
+      # - name: Upload math result for job 1
+      #   uses: actions/upload-artifact@v3
+      #   with:
+      #     name: homework
+      #     path: math-homework.txt
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index ee532988..1a2e0dc4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -67,3 +67,4 @@ app/twitter.properties
 app/build
 bin
 app/debuglib
+.vscode