ios-ci-setup

A guided bash script that walks you through generating an Apple Distribution certificate and App Store provisioning profile for use in a GitHub Actions CI/CD pipeline.

All files are saved to a single directory. At the end, a github-secrets.txt file is generated with all the values you need to add to GitHub.

---

What it does

1. Prompts you for your Apple Developer account email, name, bundle ID, and profile name
2. Generates a private key and CSR
3. Pauses and tells you exactly what to do on the Apple Developer Portal
4. Waits for you to download and place the certificate and provisioning profile
5. Converts the certificate to a .p12 with a securely generated password
6. Base64 encodes both files
7. Writes a github-secrets.txt with all values ready to paste into GitHub

---

Requirements

• OpenSSLL: brew install openssl if not installed
• An active Apple Developer account: $100 per year I think
• macOS: Windows sucks

---

Usage

git clone https://github.com/Neat-on-the-Rocks/ios-ci-setup.git
cd ios-ci-setup
./setup.sh

All generated files are saved to an ios-ci-keys/ folder in your current directory.

---

GitHub Secrets

The script generates these secrets automatically:

Secret	Description
APPLE_CERTIFICATE_BASE64	Base64-encoded Apple Distribution certificate (.p12)
APPLE_CERTIFICATE_PASSWORD	Auto-generated password for the .p12
APPLE_PROVISIONING_PROFILE_BASE64	Base64-encoded App Store provisioning profile
APPLE_ID	Your Apple Developer account email

Add secrets at: github.com/YOUR_ORG/YOUR_REPO → Settings → Secrets and variables → Actions

---

Security

• The ios-ci-keys/ directory contains your private key. Do not commit it to version control.
• The generated github-secrets.txt contains sensitive values. Delete it after adding the secrets to GitHub.
• If your private key is lost, revoke the certificate on the Apple Developer Portal and run this script again from scratch.