Crate rustferry_github 

Secure GitHub Actions workflow generation for remote physical-iPhone builds.

The generated workflow keeps source compilation and Apple signing in separate jobs. Only the protected signing job receives secret references.

Re-exports

pub use artifact_store::GithubArtifactStoreError;

pub use artifact_store::GithubVerifiedArtifactStore;

pub use workflow::DeveloperDirectory;

pub use workflow::GeneratedWorkflow;

pub use workflow::MAX_SIGNING_PROFILES;

pub use workflow::ProtectedEnvironment;

pub use workflow::PublicSourceRepository;

pub use workflow::SecretName;

pub use workflow::SigningSecretNames;

pub use workflow::TemporaryBranchNamespace;

pub use workflow::TrustedSourceRef;

pub use workflow::WorkerDistribution;

pub use workflow::WorkflowConfig;

pub use workflow::WorkflowConfigError;

pub use workflow::WorkflowFileName;

pub use workflow::WorkflowLimits;

pub use workflow::generate_workflow;

Modules

artifact

Safe client-side ingestion and independent verification of Actions artifacts. Bounded ingestion of the final GitHub Actions iPhone artifact.

artifact_offline

Secret-free, offline inspection and verification of downloaded artifact files. Secret-free offline artifact inspection and verification.

artifact_store

Verified run-attempt artifact download, cache, and client publication. Verified GitHub Actions artifact storage.

git_endpoint

Canonical GitHub Git endpoints and one-shot local remote discovery. Canonical GitHub Git endpoints and one-shot local remote discovery.

git_process

Fixed-tool, environment-cleared Git process policy. Fixed-tool, environment-cleared Git process policy.

git_repository

Private bare Git repository layout for isolated temporary-ref publication. Private bare Git repository layout for isolated temporary-ref publication.

job_logs

Bounded, attempt-scoped GitHub Actions job-log ingestion and redaction. Bounded ingestion of one exact GitHub Actions run attempt’s per-job logs.

provider

GitHub Actions build-provider orchestration and temporary-ref lifecycle. GitHub Actions build-provider orchestration and isolated temporary-ref publication.

snapshot

Operation-scoped Git snapshot identity and canonical object graph. Operation-scoped Git snapshot identity and canonical object-graph contracts.

transport

Bounded GitHub REST transport and fixed gh process adapter. Bounded GitHub REST transport for remote build orchestration.

workflow

Validated configuration and deterministic workflow rendering. Deterministic rendering of a two-phase GitHub-hosted macOS workflow.