fastlane_iac_publish 0.1.0

data/fastlane/lib/fastlane/actions/verify_pod_keys.rb

@@ -0,0 +1,67 @@
+module Fastlane
+  module Actions
+    class VerifyPodKeysAction < Action
+      def self.run(params)
+        UI.message("Validating CocoaPods Keys")
+
+        options = plugin_options
+        target = options["target"] || ""
+
+        options["keys"].each do |key|
+          UI.message(" - #{key}")
+          validate(key, target)
+        end
+      end
+
+      def self.plugin_options
+        require 'cocoapods-core'
+        podfile = Pod::Podfile.from_file("Podfile")
+        podfile.plugins["cocoapods-keys"]
+      end
+
+      def self.validate(key, target)
+        if value(key, target).length < 2
+          message = "Did not pass validation for key #{key}. " \
+            "Run `[bundle exec] pod keys get #{key} #{target}` to see what it is. " \
+            "It's likely this is running with empty/OSS keys."
+          raise message
+        end
+      end
+
+      def self.value(key, target)
+        value = `pod keys get #{key} #{target}`
+        value.split("]").last.strip
+      end
+
+      def self.author
+        "ashfurrow"
+      end
+
+      #####################################################
+      # @!group Documentation
+      #####################################################
+
+      def self.description
+        "Verifies all keys referenced from the Podfile are non-empty"
+      end
+
+      def self.details
+        "Runs a check against all keys specified in your Podfile to make sure they're more than a single character long. This is to ensure you don't deploy with stubbed keys."
+      end
+
+      def self.is_supported?(platform)
+        [:ios, :mac].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'verify_pod_keys'
+        ]
+      end
+
+      def self.category
+        :building
+      end
+    end
+  end
+end

data/fastlane/lib/fastlane/actions/verify_xcode.rb

@@ -0,0 +1,152 @@
+require 'shellwords'
+
+module Fastlane
+  module Actions
+    module SharedValues
+    end
+
+    class VerifyXcodeAction < Action
+      def self.run(params)
+        UI.message("Verifying your Xcode installation at path '#{params[:xcode_path]}'...")
+
+        # Check 1/2
+        verify_codesign(params)
+
+        # Check 2/2
+        # More information https://developer.apple.com/news/?id=09222015a
+        verify_gatekeeper(params)
+
+        true
+      end
+
+      def self.verify_codesign(params)
+        UI.message("Verifying Xcode was signed by Apple Inc.")
+
+        codesign_output = Actions.sh("codesign --display --verbose=4 #{params[:xcode_path].shellescape}")
+
+        # If the returned codesign info contains all entries for any one of these sets, we'll consider it valid
+        accepted_codesign_detail_sets = [
+          [ # Found on App Store installed Xcode installations
+            "Identifier=com.apple.dt.Xcode",
+            "Authority=Apple Mac OS Application Signing",
+            "Authority=Apple Worldwide Developer Relations Certification Authority",
+            "Authority=Apple Root CA",
+            "TeamIdentifier=59GAB85EFG"
+          ],
+          [ # Found on Xcode installations (pre-Xcode 8) downloaded from developer.apple.com
+            "Identifier=com.apple.dt.Xcode",
+            "Authority=Software Signing",
+            "Authority=Apple Code Signing Certification Authority",
+            "Authority=Apple Root CA",
+            "TeamIdentifier=not set"
+          ],
+          [ # Found on Xcode installations (post-Xcode 8) downloaded from developer.apple.com
+            "Identifier=com.apple.dt.Xcode",
+            "Authority=Software Signing",
+            "Authority=Apple Code Signing Certification Authority",
+            "Authority=Apple Root CA",
+            "TeamIdentifier=59GAB85EFG"
+          ]
+        ]
+
+        # Map the accepted details sets into an equal number of sets collecting the details for which
+        # the output of codesign did not have matches
+        missing_details_sets = accepted_codesign_detail_sets.map do |accepted_details_set|
+          accepted_details_set.reject { |detail| codesign_output.include?(detail) }
+        end
+
+        # If any of the sets is empty, it means that all details were matched, and the check is successful
+        show_and_raise_error(nil, params[:xcode_path]) unless missing_details_sets.any?(&:empty?)
+
+        UI.success("Successfully verified the code signature ✅")
+      end
+
+      def self.verify_gatekeeper(params)
+        UI.message("Verifying Xcode using GateKeeper...")
+        UI.message("This will take up to a few minutes, now is a great time to go for a coffee ☕...")
+
+        command = "/usr/sbin/spctl --assess --verbose #{params[:xcode_path].shellescape}"
+        must_includes = ['accepted']
+
+        output = verify(command: command, must_includes: must_includes, params: params)
+
+        if output.include?("source=Mac App Store") || output.include?("source=Apple") || output.include?("source=Apple System")
+          UI.success("Successfully verified Xcode installation at path '#{params[:xcode_path]}' 🎧")
+        else
+          show_and_raise_error("Invalid Download Source of Xcode: #{output}", params[:xcode_path])
+        end
+      end
+
+      def self.verify(command: nil, must_includes: nil, params: nil)
+        output = Actions.sh(command)
+
+        errors = []
+        must_includes.each do |current|
+          next if output.include?(current)
+          errors << current
+        end
+
+        if errors.count > 0
+          show_and_raise_error(errors.join("\n"), params[:xcode_path])
+        end
+
+        return output
+      end
+
+      def self.show_and_raise_error(error, xcode_path)
+        UI.error("Attention: Your Xcode Installation could not be verified.")
+        UI.error("If you believe that your Xcode is valid, please submit an issue on GitHub")
+        if error
+          UI.error("The following information couldn't be found:")
+          UI.error(error)
+        end
+        UI.user_error!("The Xcode installation at path '#{xcode_path}' could not be verified.")
+      end
+
+      #####################################################
+      # @!group Documentation
+      #####################################################
+
+      def self.description
+        "Verifies that the Xcode installation is properly signed by Apple"
+      end
+
+      def self.details
+        "This action was implemented after the recent Xcode attack to make sure you're not using a [hacked Xcode installation](http://researchcenter.paloaltonetworks.com/2015/09/novel-malware-xcodeghost-modifies-xcode-infects-apple-ios-apps-and-hits-app-store/)."
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(key: :xcode_path,
+                                       env_name: "FL_VERIFY_XCODE_XCODE_PATH",
+                                       description: "The path to the Xcode installation to test",
+                                       code_gen_sensitive: true,
+                                       default_value: File.expand_path('../../', FastlaneCore::Helper.xcode_path),
+                                       default_value_dynamic: true,
+                                       verify_block: proc do |value|
+                                         UI.user_error!("Couldn't find Xcode at path '#{value}'") unless File.exist?(value)
+                                       end)
+        ]
+      end
+
+      def self.authors
+        ["KrauseFx"]
+      end
+
+      def self.is_supported?(platform)
+        [:ios, :mac].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'verify_xcode',
+          'verify_xcode(xcode_path: "/Applications/Xcode.app")'
+        ]
+      end
+
+      def self.category
+        :building
+      end
+    end
+  end
+end

data/fastlane/lib/fastlane/actions/version_bump_podspec.rb

@@ -0,0 +1,105 @@
+module Fastlane
+  module Actions
+    module SharedValues
+      PODSPEC_VERSION_NUMBER = :PODSPEC_VERSION_NUMBER
+    end
+
+    class VersionBumpPodspecAction < Action
+      def self.run(params)
+        podspec_path = params[:path]
+
+        UI.user_error!("Could not find podspec file at path #{podspec_path}") unless File.exist?(podspec_path)
+
+        version_podspec_file = Helper::PodspecHelper.new(podspec_path, params[:require_variable_prefix])
+
+        if params[:version_number]
+          new_version = params[:version_number]
+        elsif params[:version_appendix]
+          new_version = version_podspec_file.update_version_appendix(params[:version_appendix])
+        else
+          new_version = version_podspec_file.bump_version(params[:bump_type])
+        end
+
+        version_podspec_file.update_podspec(new_version)
+
+        Actions.lane_context[SharedValues::PODSPEC_VERSION_NUMBER] = new_version
+      end
+
+      #####################################################
+      # @!group Documentation
+      #####################################################
+
+      def self.description
+        "Increment or set the version in a podspec file"
+      end
+
+      def self.details
+        [
+          "You can use this action to manipulate any 'version' variable contained in a ruby file.",
+          "For example, you can use it to bump the version of a CocoaPods' podspec file.",
+          "It also supports versions that are not semantic: `1.4.14.4.1`.",
+          "For such versions, there is an option to change the appendix (e.g. `4.1`)."
+        ].join("\n")
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(key: :path,
+                                       env_name: "FL_VERSION_BUMP_PODSPEC_PATH",
+                                       description: "You must specify the path to the podspec file to update",
+                                       code_gen_sensitive: true,
+                                       default_value: Dir["*.podspec"].last,
+                                       default_value_dynamic: true,
+                                       verify_block: proc do |value|
+                                         UI.user_error!("Please pass a path to the `version_bump_podspec` action") if value.length == 0
+                                       end),
+          FastlaneCore::ConfigItem.new(key: :bump_type,
+                                       env_name: "FL_VERSION_BUMP_PODSPEC_BUMP_TYPE",
+                                       description: "The type of this version bump. Available: patch, minor, major",
+                                       default_value: "patch",
+                                       verify_block: proc do |value|
+                                         UI.user_error!("Available values are 'patch', 'minor' and 'major'") unless ['patch', 'minor', 'major'].include?(value)
+                                       end),
+          FastlaneCore::ConfigItem.new(key: :version_number,
+                                       env_name: "FL_VERSION_BUMP_PODSPEC_VERSION_NUMBER",
+                                       description: "Change to a specific version. This will replace the bump type value",
+                                       optional: true),
+          FastlaneCore::ConfigItem.new(key: :version_appendix,
+                                       env_name: "FL_VERSION_BUMP_PODSPEC_VERSION_APPENDIX",
+                                       description: "Change version appendix to a specific value. For example 1.4.14.4.1 -> 1.4.14.5",
+                                       optional: true),
+          FastlaneCore::ConfigItem.new(key: :require_variable_prefix,
+                                       env_name: "FL_VERSION_BUMP_PODSPEC_VERSION_REQUIRE_VARIABLE_PREFIX",
+                                       description: "true by default, this is used for non CocoaPods version bumps only",
+                                       type: Boolean,
+                                       default_value: true)
+        ]
+      end
+
+      def self.output
+        [
+          ['PODSPEC_VERSION_NUMBER', 'The new podspec version number']
+        ]
+      end
+
+      def self.authors
+        ["Liquidsoul", "KrauseFx"]
+      end
+
+      def self.is_supported?(platform)
+        [:ios, :mac].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'version = version_bump_podspec(path: "TSMessages.podspec", bump_type: "patch")',
+          'version = version_bump_podspec(path: "TSMessages.podspec", version_number: "1.4")'
+        ]
+      end
+
+      def self.category
+        :misc
+      end
+    end
+  end
+end

data/fastlane/lib/fastlane/actions/version_get_podspec.rb

@@ -0,0 +1,71 @@
+module Fastlane
+  module Actions
+    module SharedValues
+      PODSPEC_VERSION_NUMBER ||= :PODSPEC_VERSION_NUMBER # originally defined in VersionBumpPodspecAction
+    end
+
+    class VersionGetPodspecAction < Action
+      def self.run(params)
+        podspec_path = params[:path]
+
+        UI.user_error!("Could not find podspec file at path '#{podspec_path}'") unless File.exist?(podspec_path)
+
+        version_podspec_file = Helper::PodspecHelper.new(podspec_path, params[:require_variable_prefix])
+
+        Actions.lane_context[SharedValues::PODSPEC_VERSION_NUMBER] = version_podspec_file.version_value
+      end
+
+      #####################################################
+      # @!group Documentation
+      #####################################################
+
+      def self.description
+        "Receive the version number from a podspec file"
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(key: :path,
+                                       env_name: "FL_VERSION_PODSPEC_PATH",
+                                       description: "You must specify the path to the podspec file",
+                                       is_string: true,
+                                       code_gen_sensitive: true,
+                                       default_value: Dir["*.podspec"].last,
+                                       default_value_dynamic: true,
+                                       verify_block: proc do |value|
+                                         UI.user_error!("Please pass a path to the `version_get_podspec` action") if value.length == 0
+                                       end),
+          FastlaneCore::ConfigItem.new(key: :require_variable_prefix,
+                                       env_name: "FL_VERSION_BUMP_PODSPEC_VERSION_REQUIRE_VARIABLE_PREFIX",
+                                       description: "true by default, this is used for non CocoaPods version bumps only",
+                                       is_string: false,
+                                       default_value: true)
+        ]
+      end
+
+      def self.output
+        [
+          ['PODSPEC_VERSION_NUMBER', 'The podspec version number']
+        ]
+      end
+
+      def self.authors
+        ["Liquidsoul", "KrauseFx"]
+      end
+
+      def self.is_supported?(platform)
+        [:ios, :mac].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'version = version_get_podspec(path: "TSMessages.podspec")'
+        ]
+      end
+
+      def self.category
+        :misc
+      end
+    end
+  end
+end

data/fastlane/lib/fastlane/actions/xcode_install.rb

@@ -0,0 +1,105 @@
+module Fastlane
+  module Actions
+    module SharedValues
+      XCODE_INSTALL_XCODE_PATH = :XCODE_INSTALL_XCODE_PATH
+    end
+
+    class XcodeInstallAction < Action
+      def self.run(params)
+        Actions.verify_gem!('xcode-install')
+
+        ENV["XCODE_INSTALL_USER"] = params[:username]
+        ENV["XCODE_INSTALL_TEAM_ID"] = params[:team_id]
+
+        require 'xcode/install'
+        installer = XcodeInstall::Installer.new
+
+        if installer.installed?(params[:version])
+          UI.success("Xcode #{params[:version]} is already installed ✨")
+        else
+          installer.install_version(params[:version], true, true, true, true)
+        end
+
+        xcode = installer.installed_versions.find { |x| x.version == params[:version] }
+        UI.user_error!("Could not find Xcode with version '#{params[:version]}'") unless xcode
+        UI.message("Using Xcode #{params[:version]} on path '#{xcode.path}'")
+        xcode.approve_license
+
+        ENV["DEVELOPER_DIR"] = File.join(xcode.path, "/Contents/Developer")
+        Actions.lane_context[SharedValues::XCODE_INSTALL_XCODE_PATH] = xcode.path
+        return xcode.path
+      end
+
+      #####################################################
+      # @!group Documentation
+      #####################################################
+
+      def self.description
+        "Make sure a certain version of Xcode is installed"
+      end
+
+      def self.details
+        "Makes sure a specific version of Xcode is installed. If that's not the case, it will automatically be downloaded by the [xcode_install](https://github.com/neonichu/xcode-install) gem. This will make sure to use the correct Xcode for later actions."
+      end
+
+      def self.available_options
+        user = CredentialsManager::AppfileConfig.try_fetch_value(:apple_dev_portal_id)
+        user ||= CredentialsManager::AppfileConfig.try_fetch_value(:apple_id)
+
+        [
+          FastlaneCore::ConfigItem.new(key: :version,
+                                       env_name: "FL_XCODE_VERSION",
+                                       description: "The version number of the version of Xcode to install",
+                                       verify_block: proc do |value|
+                                       end),
+          FastlaneCore::ConfigItem.new(key: :username,
+                                       short_option: "-u",
+                                       env_name: "XCODE_INSTALL_USER",
+                                       description: "Your Apple ID Username",
+                                       default_value: user,
+                                       default_value_dynamic: true),
+          FastlaneCore::ConfigItem.new(key: :team_id,
+                                       short_option: "-b",
+                                       env_name: "XCODE_INSTALL_TEAM_ID",
+                                       description: "The ID of your team if you're in multiple teams",
+                                       optional: true,
+                                       code_gen_sensitive: true,
+                                       default_value: CredentialsManager::AppfileConfig.try_fetch_value(:team_id),
+                                       default_value_dynamic: true)
+        ]
+      end
+
+      def self.output
+        [
+          ['XCODE_INSTALL_XCODE_PATH', 'The path to the newly installed Xcode']
+        ]
+      end
+
+      def self.return_value
+        "The path to the newly installed Xcode version"
+      end
+
+      def self.return_type
+        :string
+      end
+
+      def self.authors
+        ["Krausefx"]
+      end
+
+      def self.is_supported?(platform)
+        [:ios, :mac].include?(platform)
+      end
+
+      def self.example_code
+        [
+          'xcode_install(version: "7.1")'
+        ]
+      end
+
+      def self.category
+        :building
+      end
+    end
+  end
+end