I'm happy to report that I implemented a successful solution using environment variables and a bunch of keychain related security commands.

Thank you for such a thorough response! It's at least reassuring that I'm on the right path 😁 I posted a suggestion request under FB20115488. As a quick fix solution, I'm going to try storing the identity as a Base64 encoded environment variable and adding it to the keychain during the build. This is the approach advocated when using GitHub Actions and (somewhat) Azure DevOps Pipelines. I'll report back if that hits a roadblock...

Hi. Yes, the Developer ID identity. Thanks for promoting the use of proper terminology 😁 I've read through a number of your other posts on this forum and found them informative and helpful. And yes, I'm referring to Xcode Cloud. My ci_post_xcodebuild.sh script includes: codesign ... --sign "$CODESIGN_IDENTITY" diskimage.dmg Where CODESIGN_IDENTITY is the SHA-1 of my "Developer ID Application: My Company (MYTEAMID)". It unsurprisingly fails with: error: The specified item could not be found in the keychain. I can also see there are no identities in the keychain with: security find-identity -v -p codesigning I'm hoping Xcode Cloud provides me a better way to access the identity than uploading the .p12 to the host... Thanks!