Actually fix api key secret #3
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: 'Rotate Apple Keys' | |
on: | |
push: | |
branches: [ci] | |
workflow_dispatch: {} | |
schedule: | |
# We'll run this twice a year | |
- cron: '00 14 1 2,8 *' | |
permissions: {} | |
env: | |
NODE_VERSION: 20.x | |
jobs: | |
rotate-keys: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
submodules: true | |
persist-credentials: false | |
- name: Use Node.js ${{ env.NODE_VERSION }} | |
uses: actions/setup-node@v4 | |
with: | |
node-version: ${{ env.NODE_VERSION }} | |
- name: Cache node modules | |
uses: actions/cache@v4 | |
with: | |
path: ~/.npm | |
key: ${{ runner.os }}-node-${{ env.NODE_VERSION }}-${{ hashFiles('./.github/workflows/setup-apple-signing/package-lock.json') }} | |
- name: Install dependencies | |
run: npm ci | |
working-directory: ./.github/workflows/setup-apple-signing | |
- name: Rotate development key | |
run: node src/index.js rotate IOS_DEVELOPMENT ${{ secrets.APP_SIGNING_PRIVATE_KEY_BASE64 }} ${{ secrets.APP_STORE_CONNECT_API_KEY_BASE64 }} ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }} ${{ secrets.APP_STORE_CONNECT_API_KEY_ISSUER_ID }} | |
working-directory: ./.github/workflows/setup-apple-signing | |
- name: Rotate distribution key | |
run: node src/index.js rotate IOS_DISTRIBUTION ${{ secrets.APP_SIGNING_PRIVATE_KEY_BASE64 }} ${{ secrets.APP_STORE_CONNECT_API_KEY_BASE64 }} ${{ secrets.APP_STORE_CONNECT_API_KEY_ID }} ${{ secrets.APP_STORE_CONNECT_API_KEY_ISSUER_ID }} | |
working-directory: ./.github/workflows/setup-apple-signing |