Cutlery/immich
1
0
Fork 1
mirror of https://github.com/immich-app/immich.git synced 2026-01-09 05:30:52 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix(mobile): improve keychain setup for match certificate import

Browse Source
This commit is contained in:
Alex 2026-01-05 22:36:39 -06:00
parent fc6f55b46f
commit b24f1b31fb
No known key found for this signature in database
GPG Key ID: 53CD082B3A5E1082
1 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
.github/workflows/build-mobile.yml vendored
View File

@ -252,14 +252,28 @@ jobs:
security default-keychain -s build.keychain
security unlock-keychain -p "$KEYCHAIN_PASSWORD" build.keychain
security set-keychain-settings -t 3600 -u build.keychain
# Add keychain to search list (required for codesign to find certificates)
security list-keychains -d user -s build.keychain login.keychain
# Download and install Apple WWDR certificates (required for code signing)
curl -sL https://developer.apple.com/certificationauthority/AppleWWDRCA.cer -o AppleWWDRCA.cer
curl -sL https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer -o AppleWWDRCAG3.cer
security import AppleWWDRCA.cer -k build.keychain -T /usr/bin/codesign
security import AppleWWDRCAG3.cer -k build.keychain -T /usr/bin/codesign
# Set key partition list to allow codesign access
security set-key-partition-list -S apple-tool:,apple: -s -k "$KEYCHAIN_PASSWORD" build.keychain
- name: Build and deploy to TestFlight
env:
FASTLANE_TEAM_ID: ${{ secrets.FASTLANE_TEAM_ID }}
MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
MATCH_GIT_BASIC_AUTHORIZATION: ${{ steps.match-auth.outputs.base64_token }}
KEYCHAIN_NAME: build.keychain
KEYCHAIN_NAME: build.keychain-db
KEYCHAIN_PASSWORD: ${{ github.run_id }}
MATCH_KEYCHAIN_NAME: build.keychain-db
MATCH_KEYCHAIN_PASSWORD: ${{ github.run_id }}
APP_STORE_CONNECT_API_KEY_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }}
APP_STORE_CONNECT_API_KEY_ISSUER_ID: ${{ secrets.APP_STORE_CONNECT_API_KEY_ISSUER_ID }}
ENVIRONMENT: ${{ inputs.environment || 'development' }}