Skip to main content

INTEGRATIONS · CI/CD TOOLS

Fastlane plugin

Install the 1.1.0 Ruby plugin in your existing Fastlane project. It uses a legacy CI API key, not an API v1 workload token.

Before you install

The current client artifacts are published as versioned GitHub Release assets in private repositories. Sign in with a GitHub account that has repository read access before opening a release. An anonymous 404 is expected for these private links; it does not mean the release is missing. The SDKs are not published to npm or RubyGems, and the Action is not published to the GitHub Marketplace.

If you need repository access, email AppsCert support with the artifact and version you need and the GitHub account that should receive read access. Do not include API keys, OIDC assertions, workload tokens, passwords, private keys or certificate files in the request.

Start from an existing Ruby/Bundler project with a Fastfile and a defined lane. The plugin is not published to RubyGems.

Fastlane plugin · 1.1.0

Open the private Fastlane release. From the consumer project root, download all release assets so the complete SHA256SUMS manifest can be checked, then extract the source archive under vendor/private. It contains the gemspec needed by Bundler:

set -euo pipefail
gh auth status
PACK_DIR="$(mktemp -d)"
mkdir -p vendor/private
gh release download 1.1.0 --repo jojoyaco/appscert-fastlane --pattern 'fastlane-plugin-appscert-1.1.0.gem' --pattern 'appscert-fastlane-1.1.0.tar.gz' --pattern SHA256SUMS --dir "$PACK_DIR"

verify_sha256sums() {
  local dir="$1"
  if command -v sha256sum >/dev/null 2>&1; then
    (cd "$dir" && sha256sum -c SHA256SUMS)
  elif command -v shasum >/dev/null 2>&1; then
    (cd "$dir" && shasum -a 256 -c SHA256SUMS)
  else
    echo "Need sha256sum or shasum to verify release assets" >&2
    return 1
  fi
}

verify_sha256sums "$PACK_DIR"
tar -xzf "$PACK_DIR/appscert-fastlane-1.1.0.tar.gz" -C vendor/private

Configure and run a lane

Add the local release source to the consumer Gemfile:

gem "fastlane-plugin-appscert", path: "vendor/private/appscert-fastlane-1.1.0"

In the consumer Fastfile, load the plugin:

require "fastlane/plugin/appscert"

Install dependencies, replace YOUR_LANE with the name of a lane already defined in your Fastfile, then run it:

bundle install
bundle exec fastlane YOUR_LANE

Use a least-privilege CI API key

Provide APPSCERT_API_KEY through the runner's secret manager and, if needed, set APPSCERT_API_URL as trusted runner configuration (default https://appscert.com). Fastlane reads APPSCERT_API_URL for its API base URL. It uses the legacy CI API key flow; grant ci:read for list/check and add ci:download only when the lane downloads certificate or profile material. Create the key in Dashboard → API Keys and store it in your runner's secret manager, not in the Fastfile or repository.

c3209c7