deploy_testflight.yml

name: Deploy TestFlight

on:
  workflow_dispatch:
    inputs:
      branch:
        description: "빌드할 브랜치 이름"
        required: true
        default: "develop"
      release_notes:
        description: "테스트 노트 (선택)"
        required: false
        default: ""

jobs:
  beta:
    runs-on: macos-15

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.inputs.branch }}

      - name: Setup Xcode
        uses: maxim-lobanov/setup-xcode@v1
        with:
          xcode-version: latest-stable

      - name: Setup mise and Tuist
        uses: jdx/mise-action@v2

      - name: Setup Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: "3.2"
          bundler-cache: true

      - name: Setup App Store Connect API Key
        env:
          ASC_KEY_CONTENT: ${{ secrets.ASC_KEY_CONTENT }}
          ASC_KEY_ID: ${{ secrets.ASC_KEY_ID }}
        run: |
          set -euo pipefail
          mkdir -p ~/.appstoreconnect/private_keys
          printf '%s' "$ASC_KEY_CONTENT" | base64 --decode \
            > ~/.appstoreconnect/private_keys/AuthKey_${ASC_KEY_ID}.p8 || \
          printf '%s' "$ASC_KEY_CONTENT" | base64 -D \
            > ~/.appstoreconnect/private_keys/AuthKey_${ASC_KEY_ID}.p8

      - name: Restore GoogleService-Info.plist
        env:
          GOOGLE_SERVICE_INFO_PLIST_B64: ${{ secrets.GOOGLE_SERVICE_INFO_PLIST_B64 }}
        run: |
          set -euo pipefail
          test -n "$GOOGLE_SERVICE_INFO_PLIST_B64"
          mkdir -p Projects/App/Resources
          printf '%s' "$GOOGLE_SERVICE_INFO_PLIST_B64" | base64 --decode \
            > Projects/App/Resources/GoogleService-Info.plist || \
          printf '%s' "$GOOGLE_SERVICE_INFO_PLIST_B64" | base64 -D \
            > Projects/App/Resources/GoogleService-Info.plist

      - name: Install certificate and provisioning profile
        env:
          CERTIFICATE_P12: ${{ secrets.CERTIFICATE_P12 }}
          CERTIFICATE_PASSWORD: ${{ secrets.CERTIFICATE_PASSWORD }}
          PROVISIONING_PROFILE: ${{ secrets.PROVISIONING_PROFILE }}
        run: |
          set -euo pipefail
          KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
          KEYCHAIN_PASSWORD=$(openssl rand -base64 20)
          security create-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"
          security set-keychain-settings -lut 21600 "$KEYCHAIN_PATH"
          security unlock-keychain -p "$KEYCHAIN_PASSWORD" "$KEYCHAIN_PATH"

          P12_PATH=$RUNNER_TEMP/certificate.p12
          printf '%s' "$CERTIFICATE_P12" | base64 --decode > "$P12_PATH" || \
          printf '%s' "$CERTIFICATE_P12" | base64 -D > "$P12_PATH"
          security import "$P12_PATH" -P "$CERTIFICATE_PASSWORD" -A \
            -t cert -f pkcs12 -k "$KEYCHAIN_PATH"
          security list-keychain -d user -s "$KEYCHAIN_PATH"

          PP_DIR="$HOME/Library/MobileDevice/Provisioning Profiles"
          mkdir -p "$PP_DIR"
          printf '%s' "$PROVISIONING_PROFILE" | base64 --decode \
            > "$PP_DIR/distribution.mobileprovision" || \
          printf '%s' "$PROVISIONING_PROFILE" | base64 -D \
            > "$PP_DIR/distribution.mobileprovision"

      - name: Extract provisioning profile name
        run: |
          PP_PATH="$HOME/Library/MobileDevice/Provisioning Profiles/distribution.mobileprovision"
          PROFILE_NAME=$(security cms -D -i "$PP_PATH" | plutil -extract Name raw -)
          echo "PROVISIONING_PROFILE_SPECIFIER=$PROFILE_NAME" >> $GITHUB_ENV

      - name: Restore Common.xcconfig
        env:
          COMMON_XCCONFIG: ${{ secrets.COMMON_XCCONFIG }}
        run: |
          set -euo pipefail
          test -n "$COMMON_XCCONFIG"
          mkdir -p Projects/App/Resources
          printf '%s' "$COMMON_XCCONFIG" | base64 --decode \
            > Projects/App/Resources/Common.xcconfig || \
          printf '%s' "$COMMON_XCCONFIG" | base64 -D \
            > Projects/App/Resources/Common.xcconfig
          printf '\nPROFILE_NAME = %s\n' "${PROVISIONING_PROFILE_SPECIFIER}" \
            >> Projects/App/Resources/Common.xcconfig

      - name: Install Tuist dependencies
        run: tuist install

      - name: Generate workspace
        run: tuist generate --no-open

      - name: Deploy to TestFlight
        env:
          ASC_KEY_ID: ${{ secrets.ASC_KEY_ID }}
          ASC_ISSUER_ID: ${{ secrets.ASC_ISSUER_ID }}
          ASC_KEY_CONTENT: ${{ secrets.ASC_KEY_CONTENT }}
          DISCORD_WEBHOOK_URL: ${{ secrets.DISCORD_WEBHOOK_URL }}
          PROVISIONING_PROFILE_SPECIFIER: ${{ env.PROVISIONING_PROFILE_SPECIFIER }}
          RELEASE_NOTES: ${{ github.event.inputs.release_notes }}
        run: bundle exec fastlane beta