Skip to content

IOS secrets injection#54

Merged
ssestak merged 6 commits into
mainfrom
feature/iOS-secrets-injection
Aug 27, 2025
Merged

IOS secrets injection#54
ssestak merged 6 commits into
mainfrom
feature/iOS-secrets-injection

Conversation

@ssestak
Copy link
Copy Markdown
Collaborator

@ssestak ssestak commented Aug 26, 2025

This PR introduces a new GitHub Action to export secrets to iOS .xcconfig files. It encodes secret values to Base64 and appends them to the specified file. The action is integrated into various iOS build and release workflows.

Key Features

  • New GitHub Action: export_secrets_ios for managing iOS secrets.
  • Base64 Encoding: Secret values are Base64 encoded before being written to the .xcconfig file.
  • Required Key Validation: The action validates that all specified REQUIRED_KEYS are present and have non-empty values.
  • Workflow Integration: The action is integrated into the following workflows:
    • ios-cloud-build.yml
    • ios-cloud-release.yml
    • ios-kmp-selfhosted-build.yml
    • ios-kmp-selfhosted-release.yml
    • ios-selfhosted-build.yml
    • ios-selfhosted-release.yml

New Workflow Parameters

Parameter Name Type Description
xcconfig_path Input Path to the .xcconfig file where secrets will be appended.
required_keys Input Comma-separated list of keys that must be present in SECRET_PROPERTIES.
SECRET_PROPERTIES Secret Secrets in KEY = VALUE format, one per line.

Šimon Šesták added 5 commits August 22, 2025 08:33
This introduces a new GitHub Action to securely export sensitive properties from GitHub Secrets into an iOS .xcconfig file, Base64 encoding values and validating required keys.
Allow exporting specified secrets into an .xcconfig file for use during the iOS build process.
This enables the injection of secrets into the iOS build process via .xcconfig files.
Enables injecting sensitive properties into .xcconfig files during iOS cloud build and release workflows for secure secret handling.
Renamed `export_secrents_ios` to `export_secrets_ios` to fix a spelling error in the directory name.
@ssestak ssestak requested review from a team and jmarek41 August 26, 2025 11:20
Aligns workflows with the stable version of the action.
@ssestak ssestak merged commit 192f715 into main Aug 27, 2025
1 check passed
@ssestak ssestak deleted the feature/iOS-secrets-injection branch August 27, 2025 13:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants