Files
oott/codemagic.yaml
T
rzuastiandClaude Opus 4.8 59872bde1f Point CI at the "Codemagic" App Store Connect integration
Match the App Store Connect API key name registered in the Codemagic UI.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-07 11:48:38 -04:00

78 lines
3.0 KiB
YAML

# Codemagic CI/CD configuration for OOTT.
#
# Builds the Flutter iOS app on a cloud macOS machine and publishes it to
# TestFlight. No local Mac is required.
#
# Triggered automatically by the `vX.Y.Z` git tags that `release.sh` pushes,
# so cutting a release also ships a new TestFlight build. Can also be run
# on demand via the "Run build" button in the Codemagic UI.
#
# SECRETS: none live in this repo. The App Store Connect API key (.p8, Key ID,
# Issuer ID) is stored in Codemagic's encrypted credential store and referenced
# here only by integration name. Signing certificates and provisioning profiles
# are fetched on the build machine at build time and discarded with it.
#
# One-time setup required in the Codemagic UI before the first build:
# 1. Add an App Store Connect integration (upload the .p8, Key ID, Issuer ID)
# and put its name in `integrations.app_store_connect` below.
# 2. Create an environment variable group named `appstore_connect` containing
# APP_STORE_APP_ID = the numeric Apple ID of the app record in
# App Store Connect.
workflows:
ios-testflight:
name: iOS TestFlight
instance_type: mac_mini_m2
max_build_duration: 60
working_directory: frontend
integrations:
# Name of the App Store Connect integration configured in the Codemagic UI
# (Settings -> Integrations -> Developer Portal).
app_store_connect: Codemagic
environment:
flutter: stable
xcode: latest
cocoapods: default
groups:
- appstore_connect # provides APP_STORE_APP_ID (not a secret)
vars:
BUNDLE_ID: "net.oott-security.app" # not secret; ships inside every app
triggering:
events:
- tag
tag_patterns:
- pattern: "v*" # matches the vX.Y.Z tags release.sh pushes
include: true
scripts:
- name: Set up automatic code signing
script: |
keychain initialize
app-store-connect fetch-signing-files "$BUNDLE_ID" \
--type IOS_APP_STORE \
--create
keychain add-certificates
xcode-project use-profiles
- name: Get Flutter packages
script: flutter pub get
- name: Run frontend tests
script: flutter test
- name: Build IPA
script: |
# Each TestFlight upload needs a unique, increasing build number.
# On the very first build there are no TestFlight builds yet, so the
# lookup fails - fall back to 0 so the first build number is 1.
LATEST_BUILD_NUMBER=$(app-store-connect get-latest-testflight-build-number "$APP_STORE_APP_ID" 2>/dev/null || echo 0)
BUILD_NUMBER=$((LATEST_BUILD_NUMBER + 1))
flutter build ipa --release \
--build-number=$BUILD_NUMBER \
--export-options-plist=/Users/builder/export_options.plist
artifacts:
- build/ios/ipa/*.ipa
- /tmp/xcodebuild_logs/*.log
publishing:
app_store_connect:
auth: integration
submit_to_testflight: true
beta_groups:
- Internal Testers