Daily iOS
Build and distribution

Code signing on CI

You're automating the archive and the App Store upload on a CI server. How would you handle certificates, provisioning profiles, and App Store Connect authentication there safely?

How would an interviewer hear this answer? You'll see whether they'd move on, dig in, or say no, and which sentences would trip you up. Your score doesn't change.
See the short answer

Use fastlane match (certificates and profiles in an encrypted Git or S3 store, installed into a temporary keychain on CI) or Xcode Cloud managed signing, and authenticate uploads with an App Store Connect API key (.p8) so 2FA never comes up. Secrets live in the CI secret store and signing is pinned to manual.

Share a question