Module artifact 

Safe client-side ingestion and independent verification of Actions artifacts. Bounded ingestion of the final GitHub Actions iPhone artifact.

The GitHub artifact ZIP is untrusted input. This module accepts the exact request-derived public file set emitted by the protected signing job, validates its cross-file integrity, independently inspects the signed products, and publishes regular files without replacing a destination.

Structs

GithubArtifactExpectation

Trusted identifiers obtained independently from the submitted request and exact GitHub workflow run.

GithubArtifactIngestion

Paths and trusted expectations for one GitHub Actions artifact download.

PublishedGithubArtifact

Validated and published development IPA plus its public evidence.

Enums

GithubArtifactError

Secret-free artifact-ingestion failure.

RequiredArtifactFile

One required root file in the GitHub Actions artifact.

Constants

APP_BUNDLE_ARCHIVE_NAME

Exact signed application-bundle transport filename published by the protected job.

ARTIFACT_MANIFEST_NAME

Exact worker manifest filename published by the protected job.

DEVELOPMENT_IPA_NAME

Exact IPA filename published by the protected GitHub Actions job.

DSYM_ARCHIVE_NAME

Exact dSYM transport filename published by the protected job.

SANITIZED_BUILD_LOG_NAME

Exact sanitized signing-log filename published by the protected job.

SIGNED_XCARCHIVE_NAME

Exact signed Xcode-archive transport filename published by the protected job.

SIGNING_REPORT_NAME

Exact public signing-report filename published by the protected job.

VALIDATION_REPORT_NAME

Exact independent-validation report filename published by the protected job.

Functions

ingest_github_actions_artifact

Ingest, independently validate, and publish one GitHub Actions artifact.