fastlane-plugin-hexsign 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 67ae47604a746cc168dd35f48cc3f58d8eb9d70f9c28613004673ecf22b0491d
+  data.tar.gz: f20b85fc29619f3a33bed881b02d49f25bd1db91d9f697776910ef37ea8e60a1
+SHA512:
+  metadata.gz: 56c2e8435a98b6e2e25291eb317bc8eaa4c61cc983264072056d230c8cbad5eba3a17f9d6d089ead9354620da8e2dfba53d80d2b7f6af04a5242873d60c11cde
+  data.tar.gz: a32eae25d357b1676bcb5b15821e77c3609f5842dd0043d90ad9bc7e9edbe0c7cbdf189257c0366f5a1da381b6bc55d527e9cd36946d9c688498cb1a505f336d

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 HexSign
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,115 @@
+<p align="center">
+  <a href="https://hexsign.io">
+    <img src="https://hexsign.io/logo.png" alt="HexSign" height="64" />
+  </a>
+</p>
+
+<h1 align="center">fastlane-plugin-hexsign</h1>
+
+<p align="center">
+  Fastlane actions for <a href="https://hexsign.io">HexSign</a> — fetch Apple signing material in your lanes.
+</p>
+
+---
+
+## Install
+
+Add to your project's `Pluginfile`:
+
+```ruby
+gem "fastlane-plugin-hexsign"
+```
+
+Then:
+
+```sh
+bundle install
+```
+
+The plugin shells out to the `hexsign` CLI. You must install it separately:
+
+```sh
+brew install hexsign
+```
+
+…or use the [hexsign/hexsign-cli](https://github.com/hexsign/hexsign-cli) GitHub Action in CI.
+
+## Authentication
+
+The CLI auto-detects machine mode when these env vars are set:
+
+```sh
+HEXSIGN_CLIENT_ID=…
+HEXSIGN_CLIENT_SECRET=…
+```
+
+Provision a service credential in the [HexSign dashboard](https://dashboard.hexsign.net) under **Settings → CLI Tokens**.
+
+## Actions
+
+### `hexsign_certificates_download`
+
+Downloads a signing certificate (`.p12` + `.password`).
+
+```ruby
+hexsign_certificates_download(
+  id: ENV["HEXSIGN_CERT_ID"],
+  output_dir: "build/sign"
+)
+```
+
+| Option | Env | Required | Description |
+|---|---|---|---|
+| `id` | `HEXSIGN_CERTIFICATE_ID` | yes | Certificate ID |
+| `output_dir` | `HEXSIGN_CERTIFICATE_OUTPUT_DIR` | no | Output directory |
+| `filename` | `HEXSIGN_CERTIFICATE_FILENAME` | no | Base filename (no extension) |
+
+### `hexsign_profiles_download`
+
+Downloads a provisioning profile (`.mobileprovision`).
+
+```ruby
+hexsign_profiles_download(
+  id: ENV["HEXSIGN_PROFILE_ID"],
+  output_dir: "build/sign"
+)
+```
+
+| Option | Env | Required | Description |
+|---|---|---|---|
+| `id` | `HEXSIGN_PROFILE_ID` | yes | Provisioning profile ID |
+| `output_dir` | `HEXSIGN_PROFILE_OUTPUT_DIR` | no | Output directory |
+| `filename` | `HEXSIGN_PROFILE_FILENAME` | no | Filename (no extension) |
+
+## Example lane
+
+```ruby
+lane :beta do
+  hexsign_certificates_download(id: ENV["HEXSIGN_CERT_ID"],   output_dir: "build/sign")
+  hexsign_profiles_download    (id: ENV["HEXSIGN_PROFILE_ID"], output_dir: "build/sign")
+
+  import_certificate(
+    certificate_path:     "build/sign/certificate.p12",
+    certificate_password: File.read("build/sign/certificate.password").strip,
+    keychain_name:        "build.keychain"
+  )
+
+  gym(scheme: "MyApp")
+end
+```
+
+## Development
+
+```sh
+bundle install
+bundle exec rake          # runs rspec + rubocop
+```
+
+## Contributing & security
+
+- Bugs / feature requests: open a GitHub issue.
+- Security vulnerabilities: email **support@hexsign.io** — please do **not** open a public issue.
+
+## License
+
+[MIT](LICENSE).

data/lib/fastlane/plugin/hexsign/actions/hexsign_certificates_download.rb

@@ -0,0 +1,76 @@
+# frozen_string_literal: true
+
+require "fastlane/action"
+require_relative "../helper/hexsign_helper"
+
+module Fastlane
+  module Actions
+    class HexsignCertificatesDownloadAction < Action
+      def self.run(params)
+        args = ["certificates", "download", params[:id]]
+        args.push("--output-dir", params[:output_dir]) if params[:output_dir]
+        args.push("--filename", params[:filename]) if params[:filename]
+
+        Helper::HexsignHelper.run(args).tap { UI.success("Downloaded certificate #{params[:id]}") }
+      end
+
+      def self.description
+        "Download an Apple signing certificate (.p12 + .password) via the HexSign CLI."
+      end
+
+      def self.authors
+        ["HexSign"]
+      end
+
+      def self.details
+        <<~DETAILS
+          Wraps `hexsign certificates download <id>`. The hexsign binary must be on PATH —
+          install it with `brew install hexsign` or via the hexsign/hexsign-cli GitHub Action.
+
+          Set HEXSIGN_CLIENT_ID and HEXSIGN_CLIENT_SECRET in the environment so the CLI runs
+          in machine mode. See https://github.com/hexsign/hexsign-cli for token provisioning.
+        DETAILS
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(
+            key: :id,
+            env_name: "HEXSIGN_CERTIFICATE_ID",
+            description: "Certificate ID to download",
+            optional: false,
+            type: String
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :output_dir,
+            env_name: "HEXSIGN_CERTIFICATE_OUTPUT_DIR",
+            description: "Directory to write the .p12 and .password files into",
+            optional: true,
+            type: String
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :filename,
+            env_name: "HEXSIGN_CERTIFICATE_FILENAME",
+            description: "Base filename (no extension) for the downloaded files",
+            optional: true,
+            type: String
+          )
+        ]
+      end
+
+      def self.is_supported?(platform)
+        %i[ios mac tvos watchos visionos].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'hexsign_certificates_download(id: "cert-abc123", output_dir: "build/sign")'
+        ]
+      end
+
+      def self.category
+        :code_signing
+      end
+    end
+  end
+end

data/lib/fastlane/plugin/hexsign/actions/hexsign_profiles_download.rb

@@ -0,0 +1,76 @@
+# frozen_string_literal: true
+
+require "fastlane/action"
+require_relative "../helper/hexsign_helper"
+
+module Fastlane
+  module Actions
+    class HexsignProfilesDownloadAction < Action
+      def self.run(params)
+        args = ["profiles", "download", params[:id]]
+        args.push("--output-dir", params[:output_dir]) if params[:output_dir]
+        args.push("--filename", params[:filename]) if params[:filename]
+
+        Helper::HexsignHelper.run(args).tap { UI.success("Downloaded provisioning profile #{params[:id]}") }
+      end
+
+      def self.description
+        "Download an Apple provisioning profile (.mobileprovision) via the HexSign CLI."
+      end
+
+      def self.authors
+        ["HexSign"]
+      end
+
+      def self.details
+        <<~DETAILS
+          Wraps `hexsign profiles download <id>`. The hexsign binary must be on PATH —
+          install it with `brew install hexsign` or via the hexsign/hexsign-cli GitHub Action.
+
+          Set HEXSIGN_CLIENT_ID and HEXSIGN_CLIENT_SECRET in the environment so the CLI runs
+          in machine mode. See https://github.com/hexsign/hexsign-cli for token provisioning.
+        DETAILS
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(
+            key: :id,
+            env_name: "HEXSIGN_PROFILE_ID",
+            description: "Provisioning profile ID to download",
+            optional: false,
+            type: String
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :output_dir,
+            env_name: "HEXSIGN_PROFILE_OUTPUT_DIR",
+            description: "Directory to write the .mobileprovision file into",
+            optional: true,
+            type: String
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :filename,
+            env_name: "HEXSIGN_PROFILE_FILENAME",
+            description: "Filename (no extension) for the downloaded profile",
+            optional: true,
+            type: String
+          )
+        ]
+      end
+
+      def self.is_supported?(platform)
+        %i[ios mac tvos watchos visionos].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'hexsign_profiles_download(id: "prof-xyz789", output_dir: "build/sign")'
+        ]
+      end
+
+      def self.category
+        :code_signing
+      end
+    end
+  end
+end

data/lib/fastlane/plugin/hexsign/helper/hexsign_helper.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+require "fastlane_core/ui/ui"
+require "open3"
+require "shellwords"
+
+module Fastlane
+  UI = FastlaneCore::UI unless Fastlane.const_defined?(:UI)
+
+  module Helper
+    class HexsignHelper
+      INSTALL_HINT = "Install it with `brew install hexsign` or via the hexsign/hexsign-cli GitHub Action."
+
+      def self.binary_path
+        @binary_path ||= find_binary
+      end
+
+      # Resets memoization. Tests only.
+      def self.reset!
+        @binary_path = nil
+      end
+
+      def self.find_binary
+        path = which("hexsign")
+        UI.user_error!("hexsign binary not found on PATH. #{INSTALL_HINT}") if path.nil?
+        path
+      end
+
+      def self.which(cmd)
+        exts = ENV["PATHEXT"] ? ENV["PATHEXT"].split(";") : [""]
+        ENV["PATH"].to_s.split(File::PATH_SEPARATOR).each do |dir|
+          exts.each do |ext|
+            candidate = File.join(dir, "#{cmd}#{ext}")
+            return candidate if File.executable?(candidate) && !File.directory?(candidate)
+          end
+        end
+        nil
+      end
+
+      # Runs the CLI and returns stdout. Raises FastlaneCore::Interface::FastlaneError
+      # on non-zero exit, surfacing stderr to the user.
+      def self.run(args)
+        cmd = [binary_path, *args]
+        UI.command(cmd.shelljoin)
+        stdout, stderr, status = Open3.capture3(*cmd)
+        unless status.success?
+          UI.error(stderr.strip) unless stderr.strip.empty?
+          UI.user_error!("hexsign exited with status #{status.exitstatus}")
+        end
+        stdout
+      end
+    end
+  end
+end

data/lib/fastlane/plugin/hexsign/version.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module Fastlane
+  module Hexsign
+    VERSION = "0.1.0"
+  end
+end

data/lib/fastlane/plugin/hexsign.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+require "fastlane/plugin/hexsign/version"
+
+module Fastlane
+  module Hexsign
+    # Auto-load every action and helper in this gem so Fastlane can discover them.
+    def self.all_classes
+      Dir[File.expand_path("hexsign/**/*.rb", __dir__)]
+    end
+  end
+end
+
+Fastlane::Hexsign.all_classes.each { |f| require f }

metadata

@@ -0,0 +1,109 @@
+--- !ruby/object:Gem::Specification
+name: fastlane-plugin-hexsign
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- HexSign
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2026-05-12 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: fastlane
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.210.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.210.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.50'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.50'
+description:
+email: support@hexsign.io
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- lib/fastlane/plugin/hexsign.rb
+- lib/fastlane/plugin/hexsign/actions/hexsign_certificates_download.rb
+- lib/fastlane/plugin/hexsign/actions/hexsign_profiles_download.rb
+- lib/fastlane/plugin/hexsign/helper/hexsign_helper.rb
+- lib/fastlane/plugin/hexsign/version.rb
+homepage: https://github.com/hexsign/fastlane-plugin-hexsign
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://hexsign.io
+  source_code_uri: https://github.com/hexsign/fastlane-plugin-hexsign
+  bug_tracker_uri: https://github.com/hexsign/fastlane-plugin-hexsign/issues
+  rubygems_mfa_required: 'true'
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.5.22
+signing_key:
+specification_version: 4
+summary: Fastlane actions for HexSign — fetch Apple signing material from your lanes.
+test_files: []