fastlane 2.61.0.beta.20171006010004 → 2.61.0.beta.20171007010004

data/fastlane/lib/fastlane/actions/docs/cert.md

@@ -18,13 +18,11 @@
 
 In the gif we used `cert && sigh`, which will first create an iOS code signing certificate and then a provisioning profile for your app if _cert_ succeeded.
 
-##### [Do you like fastlane? Be the first to know about updates and new fastlane tools](https://tinyletter.com/fastlane-tools)
-
 # Usage
 
 **Note**: It is recommended to use [match](/actions/match) according to the [codesigning.guide](https://codesigning.guide) for generating and maintaining your certificates. Use _cert_ directly only if you want full control over what's going on and know more about codesigning.
 
-```
+```no-highlight
 fastlane cert
 ```
 
@@ -49,7 +47,7 @@ fastlane cert -u cert@krausefx.com
 For a list of available commands run
 
 ```no-highlight
-fastlane cert --help
+fastlane action cert
 ```
 
 Keep in mind, there is no way for _cert_ to download existing certificates + private keys from the Apple Developer Portal, as the private key never leaves your computer.

data/fastlane/lib/fastlane/actions/docs/deliver.md

@@ -28,8 +28,6 @@ _deliver_ uploads screenshots, metadata and binaries to iTunes Connect. Use _del
 
 To upload builds to TestFlight check out [pilot](/actions/pilot).
 
-##### [Do you like fastlane? Be the first to know about updates and new fastlane tools](https://tinyletter.com/fastlane-tools)
-
 # Quick Start
 
 The guide will create all the necessary files for you, using the existing app metadata from iTunes Connect.
@@ -412,7 +410,7 @@ _deliver_ uses the following techniques under the hood:
 # Tips
 
 ## Available language codes
-```
+```no-highlight
 no, en-US, en-CA, fi, ru, zh-Hans, nl-NL, zh-Hant, en-AU, id, de-DE, sv, ko, ms, pt-BR, el, es-ES, it, fr-CA, es-MX, pt-PT, vi, th, ja, fr-FR, da, tr, en-GB
 ```
 

data/fastlane/lib/fastlane/actions/docs/frameit.md

@@ -0,0 +1,215 @@
+<p align="center">
+  <img src="/img/actions/frameit.png" height="110">
+</p>
+
+###### Quickly put your screenshots into the right device frames
+
+_frameit_ allows you to put a gorgeous device frame around your iOS and macOS screenshots just by running one simple command. Use _frameit_ to prepare perfect screenshots for the App Store, your website, QA or emails.
+
+-------
+
+<p align="center">
+    <a href="#features">Features</a> &bull;
+    <a href="#usage">Usage</a> &bull;
+    <a href="#tips">Tips</a>
+</p>
+
+-------
+
+<h5 align="center"><code>frameit</code> is part of <a href="https://fastlane.tools">fastlane</a>: The easiest way to automate beta deployments and releases for your iOS and Android apps.</h5>
+
+
+# Features
+
+Put a gorgeous device frame around your iOS and macOS screenshots just by running one simple command. Support for:
+- iPhone, iPad and Mac
+- Portrait and Landscape modes
+- Several colors
+
+The complete and updated list of supported devices and colors can be found [here](https://github.com/fastlane/frameit-frames/tree/gh-pages/latest)
+
+Here is a nice gif, that shows ``_frameit_`` in action:
+
+![img/actions/FrameitGit.gif](assets/FrameitGit.gif?raw=1)
+
+### Results
+
+![img/actions/ScreenshotsBig.png](assets/ScreenshotsBig.png?raw=1)
+
+-------
+
+![img/actions/ScreenshotsOverview.png](assets/ScreenshotsOverview.png?raw=1)
+
+-------
+
+![img/actions/MacExample.png](assets/MacExample.png?raw=1)
+
+<h5 align="center">The <code>frameit</code> 2.0 update was kindly sponsored by <a href="https://mindnode.com/">MindNode</a>, seen in the screenshots above.
+
+
+The first time that ``_frameit_`` is executed the frames will be downloaded automatically. Originally the frames are coming from [Facebook frameset](http://facebook.design/devices) and they are kept on this repo: https://github.com/fastlane/frameit-frames
+
+More information about this process and how to update the frames can be found [here](https://github.com/fastlane/fastlane/tree/master/frameit/frames_generator)
+
+# Usage
+
+Why should you have to use Photoshop, just to add a frame around your screenshots?
+
+Just navigate to your folder of screenshots and use the following command:
+
+    fastlane frameit
+
+To use the silver version of the frames:
+
+    fastlane frameit silver
+
+To download the latest frames
+
+    fastlane frameit download_frames
+
+When using _frameit_ without titles on top, the screenshots will have the full resolution, which means they can't be uploaded to the App Store directly. They are supposed to be used for websites, print media and emails. Check out the section below to use the screenshots for the App Store.
+
+# Titles and Background (optional)
+
+With _frameit_ 2.0 you are now able to add a custom background, title and text colors to your screenshots.
+
+A working example can be found in the [fastlane examples](https://github.com/fastlane/examples/tree/master/MindNode/screenshots) project.
+
+#### `Framefile.json`
+
+Use it to define the general information:
+
+```json
+{
+  "device_frame_version": "latest",
+  "default": {
+    "keyword": {
+      "font": "./fonts/MyFont-Rg.otf"
+    },
+    "title": {
+      "font": "./fonts/MyFont-Th.otf",
+      "color": "#545454"
+    },
+    "background": "./background.jpg",
+    "padding": 50,
+    "show_complete_frame": false,
+    "stack_title" : false,
+    "title_below_image": true
+  },
+
+  "data": [
+    {
+      "filter": "Brainstorming",
+      "keyword": {
+        "color": "#d21559"
+      }
+    },
+    {
+      "filter": "Organizing",
+      "keyword": {
+        "color": "#feb909"
+      }
+    },
+    {
+      "filter": "Sharing",
+      "keyword": {
+        "color": "#aa4dbc"
+      }
+    },
+    {
+      "filter": "Styling",
+      "keyword": {
+        "color": "#31bb48"
+      }
+    }
+  ]
+}
+```
+The `stack_title` value specifies whether _frameit_ should display the keyword above the title when both keyword and title are defined.
+
+The `show_complete_frame` value specifies whether _frameit_ should shrink the device and frame so that they show in full in the framed screenshot. If it is false, then they can hang over the bottom of the screenshot.
+
+The `title_below_image` value specifies whether _frameit_ should place the title below the screenshot. If it is false, it will be placed above the screenshot.
+
+The `filter` value is a part of the screenshot named for which the given option should be used. If a screenshot is named `iPhone5_Brainstorming.png` the first entry in the `data` array will be used.
+
+You can find a more complex [configuration](https://github.com/fastlane/examples/blob/master/MindNode/screenshots/Framefile.json) to also support Chinese, Japanese and Korean languages.
+
+The `Framefile.json` should be in the `screenshots` folder, as seen in the [example](https://github.com/fastlane/examples/tree/master/MindNode/screenshots).
+
+#### `.strings` files
+
+To define the title and optionally the keyword, put two `.strings` files into the language folder (e.g. [en-US in the example project](https://github.com/fastlane/examples/tree/master/MindNode/screenshots/en-US))
+
+The `keyword.strings` and `title.strings` are standard `.strings` file you already use for your iOS apps, making it easy to use your existing translation service to get localized titles.
+
+**Note:** These `.strings` files **MUST** be utf-16 encoded (UTF-16 BE with BOM).  They also must begin with an empty line. If you are having trouble see [issue #1740](https://github.com/fastlane/fastlane/issues/1740)
+
+**Note:** You **MUST** provide a background if you want titles. _frameit_ will not add the tiles if a background is not specified.
+
+#### Uploading screenshots to iTC
+
+Use [deliver](https://github.com/fastlane/fastlane/tree/master/deliver) to upload all screenshots to iTunes Connect completely automatically 🚀
+
+### Mac
+
+With _frameit_ 2.0 it's possible to also frame macOS Application screenshots. You have to provide the following:
+
+- The `offset` information so _frameit_ knows where to put your screenshots
+- A path to a `background`, which should contain both the background and the Mac
+- `titleHeight`: The height in px that should be used for the title
+
+##### Example
+```json
+{
+  "default": {
+    "title": {
+      "color": "#545454"
+    },
+    "background": "Mac.jpg",
+    "offset": {
+      "offset": "+676+479",
+      "titleHeight": 320
+    }
+  },
+  "data": [
+    {
+      "filter": "Brainstorming",
+      "keyword": {
+        "color": "#d21559"
+      }
+    }
+  ]
+}
+```
+
+Check out the [MindNode example project](https://github.com/fastlane/examples/tree/master/MindNode/screenshots).
+
+# Tips
+
+## Generate localized screenshots
+Check out [_snapshot_](https://github.com/fastlane/fastlane/tree/master/snapshot) to automatically generate screenshots using ```UI Automation```.
+
+## Alternative location to store device_frames
+
+Device frames can also be stored in a ```./fastlane/screenshots/devices_frames``` directory if you prefer rather than in the ```~/.frameit/device_frames``` directory. If doing so please be aware that Apple's images are copyrighted and should not be redistributed as part of a repository so you may want to include them in your .gitignore file.
+
+## White background of frames
+
+Some stock images provided by Apple still have a white background instead of a transparent one. You'll have to edit the Photoshop file to remove the white background, delete the generated `.png` file and run `fastlane frameit` again.
+
+## Use a clean status bar
+You can use [SimulatorStatusMagic](https://github.com/shinydevelopment/SimulatorStatusMagic) to clean up the status bar.
+
+## Gray artifacts around text
+
+If you run into any quality issues, like having a border around the font, it usually helps to just re-install `imagemagick`. You can do so by running
+
+```sh
+brew uninstall imagemagick
+brew install imagemagick
+```
+
+## Uninstall
+- ```sudo gem uninstall fastlane```
+- ```rm -rf ~/.frameit```

data/fastlane/lib/fastlane/actions/docs/gym.md

@@ -16,13 +16,13 @@
 
 # What's gym?
 
-_gym_ builds and packages iOS apps for you. It takes care of all the heavy lifting and makes it super easy to generate a signed `ipa` or `app` file :muscle:
+_gym_ builds and packages iOS apps for you. It takes care of all the heavy lifting and makes it super easy to generate a signed `ipa` or `app` file 💪
 
 _gym_ is a replacement for [shenzhen](https://github.com/nomad/shenzhen).
 
 ### Before _gym_
 
-```
+```no-highlight
 xcodebuild clean archive -archivePath build/MyApp \
                          -scheme MyApp
 xcodebuild -exportArchive \
@@ -34,7 +34,7 @@ xcodebuild -exportArchive \
 
 ### With _gym_
 
-```
+```no-highlight
 fastlane gym
 ```
 
@@ -44,17 +44,17 @@ _gym_ uses the latest APIs to build and sign your application which results in m
 
 |          |  Gym Features  |
 |----------|----------------|
-:rocket:            | _gym_ builds 30% faster than other build tools like [shenzhen](https://github.com/nomad/shenzhen)
-:checkered_flag: | Beautiful inline build output
-:book:     | Helps you resolve common build errors like code signing issues
-:mountain_cableway: | Sensible defaults: Automatically detect the project, its schemes and more
-:link:  | Works perfectly with [fastlane](https://fastlane.tools) and other tools
-:package: | Automatically generates an `ipa` and a compressed `dSYM` file
-:bullettrain_side: | Don't remember any complicated build commands, just _gym_
-:wrench:  | Easy and dynamic configuration using parameters and environment variables
-:floppy_disk:   | Store common build settings in a `Gymfile`
-:outbox_tray: | All archives are stored and accessible in the Xcode Organizer
-:computer: | Supports both iOS and Mac applications
+🚀            | _gym_ builds 30% faster than other build tools like [shenzhen](https://github.com/nomad/shenzhen)
+🏁 | Beautiful inline build output
+📖    | Helps you resolve common build errors like code signing issues
+🚠 | Sensible defaults: Automatically detect the project, its schemes and more
+🔗  | Works perfectly with [fastlane](https://fastlane.tools) and other tools
+📦 | Automatically generates an `ipa` and a compressed `dSYM` file
+🚅 | Don't remember any complicated build commands, just _gym_
+🔧  | Easy and dynamic configuration using parameters and environment variables
+💾   | Store common build settings in a `Gymfile`
+📤 | All archives are stored and accessible in the Xcode Organizer
+💻 | Supports both iOS and Mac applications
 
 ![/img/actions/gymScreenshot.png](/img/actions/gymScreenshot.png)
 
@@ -82,7 +82,7 @@ DEVELOPER_DIR="/Applications/Xcode6.2.app" fastlane gym
 
 For a list of all available parameters use
 
-```
+```no-highlight
 fastlane action gym
 ```
 
@@ -207,7 +207,7 @@ When you run _gym_ without the `--silent` mode it will print out every command i
 
 To build the archive _gym_ uses the following command:
 
-```
+```no-highlight
 set -o pipefail && \
 xcodebuild -scheme 'Example' \
 -project './Example.xcodeproj' \
@@ -223,7 +223,7 @@ _gym_ automatically chooses a different packaging method depending on the versio
 
 ### Xcode 7 and above
 
-```
+```no-highlight
 /usr/bin/xcrun path/to/xcbuild-safe.sh -exportArchive \
 -exportOptionsPlist '/tmp/gym_config_1442852529.plist' \
 -archivePath '/Users/fkrause/Library/Developer/Xcode/Archives/2015-09-21/App 2015-09-21 09.21.56.xcarchive' \

data/fastlane/lib/fastlane/actions/docs/match.md

@@ -0,0 +1,352 @@
+<p align="center">
+  <img src="/img/actions/match.png" height="110">
+</p>
+
+###### Easily sync your certificates and profiles across your team using git
+
+A new approach to iOS code signing: Share one code signing identity across your development team to simplify your codesigning setup and prevent code signing issues.
+
+_match_ is the implementation of the https://codesigning.guide concept. _match_ creates all required certificates & provisioning profiles and stores them in a separate git repository. Every team member with access to the repo can use those credentials for code signing. _match_ also automatically repairs broken and expired credentials. It's the easiest way to share signing credentials across teams
+
+[More information on how to get started with codesigning](https://docs.fastlane.tools/codesigning/getting-started/)
+
+-------
+
+<p align="center">
+    <a href="#why-match">Why?</a> &bull;
+    <a href="#usage">Usage</a> &bull;
+    <a href="#is-this-secure">Is this secure?</a>
+</p>
+
+-------
+
+<h5 align="center"><code>match</code> is part of <a href="https://fastlane.tools">fastlane</a>: The easiest way to automate beta deployments and releases for your iOS and Android apps.</h5>
+
+## Why match?
+
+Before starting to use _match_, make sure to read the [codesigning.guide](https://codesigning.guide)
+
+> When deploying an app to the App Store, beta testing service or even installing it on a device, most development teams have separate code signing identities for every member. This results in dozens of profiles including a lot of duplicates.
+
+> You have to manually renew and download the latest set of provisioning profiles every time you add a new device or a certificate expires. Additionally this requires spending a lot of time when setting up a new machine that will build your app.
+
+**A new approach**
+
+> Share one code signing identity across your development team to simplify your setup and prevent code signing issues. What if there was a central place where your code signing identity and profiles are kept, so anyone in the team can access them during the build process?
+
+### Why not let Xcode handle all this?
+
+- You have full control over what happens
+- You have access to all the certificates and profiles, which are all securely stored in git
+- You share one code signing identity across the team to have fewer certificates and profiles
+- Xcode sometimes revokes certificates which breaks your setup causing failed builds
+- More predictable builds by settings profiles in an explicit way instead of using the `Automatic` setting
+- It just works™
+
+### What does _match_ do for you?
+
+|          |  match  |
+|----------|---------|
+🔄  | Automatically sync your iOS keys and profiles across all your team members using git
+📦  | Handle all the heavy lifting of creating and storing your certificates and profiles
+💻  | Setup codesigning on a new machine in under a minute
+🎯 | Designed to work with apps with multiple targets and bundle identifiers
+🔒 | You have full control over your files and Git repo, no third party service involved
+✨ | Provisioning profile will always match the correct certificate
+💥  | Easily reset your existing profiles and certificates if your current account has expired or invalid profiles
+♻️  | Automatically renew your provisioning profiles to include all your devices using the `--force` option
+👥  | Support for multiple Apple accounts and multiple teams
+✨ | Tightly integrated with [fastlane](https://fastlane.tools) to work seamlessly with [gym](https://github.com/fastlane/fastlane/tree/master/gym) and other build tools
+
+For more information about the concept, visit [codesigning.guide](https://codesigning.guide).
+
+## Usage
+
+### Setup
+
+1. Create a **new, private Git repo** (e.g. on [GitHub](https://github.com/new) or [BitBucket](https://bitbucket.org/repo/create)) and name it something like `certificates`. **Important:** Make sure the repository is set to *private*.
+
+2. Optional: Create a **new, shared Apple Developer Portal account**, something like `office@company.com` that will be shared across your team from now on (for more information visit [codesigning.guide](https://codesigning.guide))
+
+3. Run the following in your project folder to start using _match_:
+
+```no-highlight
+fastlane match init
+```
+
+<img src="/img/actions/match_init.gif" width="550" />
+
+You'll be asked to enter the URL to your Git repo. This can be either a `https://` or a `git` URL. (If your machine is currently using SSH to authenticate with Github, you'll want to use a `git` URL, otherwise you may see an authentication error when you attempt to use match.) `fastlane match init` won't read or modify your certificates or profiles.
+
+This will create a `Matchfile` in your current directory (or in your `./fastlane/` folder).
+
+Example content (for more advanced setups check out the [fastlane section](#fastlane)):
+
+```ruby
+git_url "https://github.com/fastlane/fastlane/tree/master/certificates"
+
+app_identifier "tools.fastlane.app"
+username "user@fastlane.tools"
+```
+
+#### Important: Use one git branch per team
+
+_match_ also supports storing certificates of multiple teams in one repo, by using separate git branches. If you work in multiple teams, make sure to set the `git_branch` parameter to a unique value per team. From there, _match_ will automatically create and use the specified branch for you.
+
+```ruby
+match(git_branch: "team1", username: "user@team1.com")
+match(git_branch: "team2", username: "user@team2.com")
+```
+
+### Run
+
+> Before running _match_ for the first time, you should consider clearing your existing profiles and certificates using the [match nuke command](#nuke).
+
+After running `fastlane match init` you can run the following to generate new certificates and profiles:
+
+```no-highlight
+fastlane match appstore
+```
+
+```no-highlight
+fastlane match development
+```
+
+<img src="/img/actions/match_appstore_small.gif" width="550" />
+
+This will create a new certificate and provisioning profile (if required) and store them in your Git repo. If you previously ran _match_ it will automatically install the existing profiles from the Git repo.
+
+The provisioning profiles are installed in `~/Library/MobileDevice/Provisioning Profiles` while the certificates and private keys are installed in your Keychain.
+
+To get a more detailed output of what _match_ is doing use
+
+```no-highlight
+fastlane match --verbose
+```
+
+For a list of all available options run
+
+```no-highlight
+fastlane action match
+```
+
+#### Handle multiple targets
+
+If you have several targets with different bundle identifiers, supply them as a comma-separated list to   :
+
+```no-highlight
+fastlane match appstore -a tools.fastlane.app,tools.fastlane.app.watchkitapp
+```
+
+You can make this even easier using [fastlane](https://github.com/fastlane/fastlane/tree/master/fastlane) by creating a `certificates` lane like this:
+
+```ruby
+lane :certificates do
+  match(app_identifier: ["com.krausefx.app1", "com.krausefx.app2", "com.krausefx.app3"], readonly: true)
+end
+```
+
+Then all your team has to do is `fastlane certificates` and keys, certs and profiles for all targets will be synced.
+
+#### Passphrase
+
+When running _match_ for the first time on a new machine, it will ask you for the passphrase for the Git repository. This is an additional layer of security: each of the files will be encrypted using `openssl`. Make sure to remember the password, as you'll need it when you run match on a different machine.
+
+To set the passphrase to decrypt your profiles using an environment variable, use `MATCH_PASSWORD`.
+
+#### New machine
+
+To set up the certificates and provisioning profiles on a new machine, you just run the same command using:
+
+```no-highlight
+fastlane match development
+```
+
+You can also run _match_ in a `readonly` mode to be sure it won't create any new certificates or profiles.
+
+```no-highlightno-highlight
+fastlane match development --readonly
+```
+
+#### Access Control
+
+A benefit of using _match_ is that it enables you to give the developers of your team access to the code signing certificates without having to give everyone access to the Developer Portal:
+
+1. Run _match_ to store the certificates in a Git repo
+2. Grant access to the Git repo to your developers and give them the passphrase
+3. The developers can now run _match_ which will install the latest code signing profiles so they can build and sign the application without having to have access to the developer portal
+4. Every time you run _match_ to update the profiles (e.g. add a new device), all your developers will automatically get the latest profiles when running _match_
+
+If you decide to run _match_ without access to the developer portal, make sure to use the `--readonly` option so that the commands don't ask you for the password to the developer portal.
+
+The advantage of this approach is that no one in your team will revoke a certificate by mistake. Additionally it is recommended to install the [FixCode Xcode Plugin](https://github.com/neonichu/FixCode) to disable the `Fix Issue` button.
+
+#### Git Repo
+
+After running _match_ for the first time, your Git repo will contain 2 directories:
+
+- The `certs` folder contains all certificates with their private keys
+- The `profiles` folder contains all provisioning profiles
+
+Additionally, _match_ creates a nice repo `README.md` for you, making it easy to onboard new team members:
+
+<p align="center">
+  <img src="/img/actions/github_repo.png" width="700" />
+</p>
+
+#### fastlane
+
+Add _match_ to your `Fastfile` to automatically fetch the latest code signing certificates with [fastlane](https://fastlane.tools).
+
+```ruby
+match(type: "appstore")
+
+match(git_url: "https://github.com/fastlane/fastlane/tree/master/certificates",
+      type: "development")
+
+match(git_url: "https://github.com/fastlane/fastlane/tree/master/certificates",
+      type: "adhoc",
+      app_identifier: "tools.fastlane.app")
+
+match(git_url: "https://github.com/fastlane/fastlane/tree/master/certificates",
+      type: "enterprise",
+      app_identifier: "tools.fastlane.app")
+
+# _match_ should be called before building the app with _gym_
+gym
+...
+```
+
+##### Registering new devices
+
+By using _match_, you'll save a lot of time every time you add new device to your Ad Hoc or Development profiles. Use _match_ in combination with the [`register_devices`](https://docs.fastlane.tools/actions#register_devices) action.
+
+```ruby
+lane :beta do
+  register_devices(devices_file: "./devices.txt")
+  match(type: "adhoc", force_for_new_devices: true)
+end
+```
+
+By using the `force_for_new_devices` parameter, _match_ will check if the device count has changed since the last time you ran _match_, and automatically re-generate the provisioning profile if necessary. You can also use `force: true` to re-generate the provisioning profile on each run.
+
+_**Important:** The `force_for_new_devices` parameter is ignored for App Store provisioning profiles since they don't contain any device information._
+
+If you're not using `fastlane`, you can also use the `force_for_new_devices` option from the command line:
+
+```no-highlight
+fastlane match adhoc --force_for_new_devices
+```
+
+##### Multiple Targets
+
+If your app has multiple targets (e.g. Today Widget or WatchOS Extension)
+
+```ruby
+match(app_identifier: ["tools.fastlane.app", "tools.fastlane.app.today_widget"], type: "appstore")
+```
+
+_match_ can even use the same one Git repository for all bundle identifiers.
+
+### Setup Xcode project
+
+[Docs on how to set up your Xcode project](https://docs.fastlane.tools/codesigning/XcodeProject/)
+
+#### To build from the command line using [fastlane](https://fastlane.tools)
+
+_match_ automatically pre-fills environment variables with the UUIDs of the correct provisioning profiles, ready to be used in your Xcode project.
+
+More information about how to setup your Xcode project can be found [here](https://docs.fastlane.tools/codesigning/XcodeProject/)
+
+#### To build from Xcode manually
+
+This is useful when installing your application on your device using the Development profile.
+
+You can statically select the right provisioning profile in your Xcode project (the name will be `match Development tools.fastlane.app`).
+
+[Docs on how to set up your Xcode project](/codesigning/xcode-project/.md)
+
+### Continuous Integration
+
+#### Repo access
+There is one tricky part of setting up a CI system to work with _match_, which is enabling the CI to access the repo. Usually you'd just add your CI's public ssh key as a deploy key to your _match_ repo, but since your CI will already likely be using its public ssh key to access the codebase repo, [you won't be able to do that](https://help.github.com/articles/error-key-already-in-use/).
+
+Some repo hosts might allow you to use the same deploy key for different repos, but GitHub will not. If your host does, you don't need to worry about this, just add your CI's public ssh key as a deploy key for your _match_ repo and scroll down to "_Encryption password_".
+
+There are a few ways around this:
+
+1. Create a new account on your repo host with read-only access to your _match_ repo. Bitrise have a good description of this [here](http://devcenter.bitrise.io/faq/adding-projects-with-submodules/).
+2. Some CIs allow you to upload your signing credentials manually, but obviously this means that you'll have to re-upload the profiles/keys/certs each time they change.
+
+Neither solution is pretty. It's one of those _trade-off_ things. Do you care more about **not** having an extra account sitting around, or do you care more about having the :sparkles: of auto-syncing of credentials.
+
+#### Encryption password
+Once you've decided which approach to take, all that's left to do is to set your encryption password as secret environment variable named `MATCH_PASSWORD`. _match_ will pick this up when it's run.
+
+### Nuke
+
+If you never really cared about code signing and have a messy Apple Developer account with a lot of invalid, expired or Xcode managed profiles/certificates, you can use the `match nuke` command to revoke your certificates and provisioning profiles. Don't worry, apps that are already available in the App Store / TestFlight will still work. Builds distributed via Ad Hoc or Enterprise will be disabled after nuking your account, so you'll have to re-upload a new build. After clearing your account you'll start from a clean state, and you can run _match_ to generate your certificates and profiles again.
+
+To revoke all certificates and provisioning profiles for a specific environment:
+
+```no-highlight
+fastlane match nuke development
+fastlane match nuke distribution
+```
+
+<img src="/img/actions/match_nuke.gif" width="550" />
+
+You'll have to confirm a list of profiles / certificates that will be deleted.
+
+### Change Password
+
+To change the password of your repo and therefore decrypting and encrypting all files run
+
+```no-highlight
+fastlane match change_password
+```
+
+You'll be asked for the new password on all your machines on the next run.
+
+### Manual Decrypt
+
+If you want to manually decrypt a file you can.
+
+```no-highlight
+openssl aes-256-cbc -k "<password>" -in "<fileYouWantToDecryptPath>" -out "<decryptedFilePath>" -a -d
+```
+
+
+## Is this secure?
+
+Both your keys and provisioning profiles are encrypted using OpenSSL using a passphrase.
+
+Storing your private keys in a Git repo may sound off-putting at first. We did an in-depth analysis of potential security issues and came to the following conclusions:
+
+#### What could happen if someone stole a private key?
+
+If attackers would have your certificate and provisioning profile, they could codesign an application with the same bundle identifier.
+
+What's the worst that could happen for each of the profile types?
+
+##### App Store Profiles
+
+An App Store profile can't be used for anything as long as it's not re-signed by Apple. The only way to get an app resigned is to submit an app for review which could take anywhere from 24 hours to a few days (checkout [appreviewtimes.com](http://appreviewtimes.com) for up-to-date expectations). Attackers could only submit an app for review, if they also got access to your iTunes Connect credentials (which are not stored in git, but in your local keychain). Additionally you get an email notification every time a build gets uploaded to cancel the submission even before your app gets into the review stage.
+
+##### Development and Ad Hoc Profiles
+
+In general those profiles are harmless as they can only be used to install a signed application on a small subset of devices. To add new devices, the attacker would also need your Apple Developer Portal credentials (which are not stored in git, but in your local keychain).
+
+##### Enterprise Profiles
+
+Attackers could use an In-House profile to distribute signed application to a potentially unlimited number of devices. All this would run under your company name and it could eventually lead to Apple revoking your In-House account. However it is very easy to revoke a certificate to remotely break the app on all devices.
+
+Because of the potentially dangerous nature of In-House profiles please use _match_ with enterprise profiles with caution, ensure your git repository is private and use a secure password.
+
+##### To sum up
+
+- You have full control over the access list of your Git repo, no third party service involved
+- Even if your certificates are leaked, they can't be used to cause any harm without your iTunes Connect login credentials
+- Use In-House enterprise profile with _match_ with caution
+- If you use GitHub or Bitbucket we encourage enabling 2 factor authentication for all accounts that have access to the certificates repo
+- The complete source code of _match_ is fully open source on [GitHub](https://github.com/fastlane/fastlane/tree/master/match)