Post

Replies

Boosts

Views

Activity

Reply to Best practices for post-build codesigning
Hi. Yes, the Developer ID identity. Thanks for promoting the use of proper terminology 😁 I've read through a number of your other posts on this forum and found them informative and helpful. And yes, I'm referring to Xcode Cloud. My ci_post_xcodebuild.sh script includes: codesign ... --sign "$CODESIGN_IDENTITY" diskimage.dmg Where CODESIGN_IDENTITY is the SHA-1 of my "Developer ID Application: My Company (MYTEAMID)". It unsurprisingly fails with: error: The specified item could not be found in the keychain. I can also see there are no identities in the keychain with: security find-identity -v -p codesigning I'm hoping Xcode Cloud provides me a better way to access the identity than uploading the .p12 to the host... Thanks!
Sep ’25
Reply to Best practices for post-build codesigning
Thank you for such a thorough response! It's at least reassuring that I'm on the right path 😁 I posted a suggestion request under FB20115488. As a quick fix solution, I'm going to try storing the identity as a Base64 encoded environment variable and adding it to the keychain during the build. This is the approach advocated when using GitHub Actions and (somewhat) Azure DevOps Pipelines. I'll report back if that hits a roadblock...
Sep ’25