Module workflow 

Validated configuration and deterministic workflow rendering. Deterministic rendering of a two-phase GitHub-hosted macOS workflow.

Structs

DeveloperDirectory

Absolute Xcode developer directory selected per job through DEVELOPER_DIR.

GeneratedWorkflow

Deterministically generated repository-relative path and YAML bytes.

ProtectedEnvironment

Validated GitHub Environment name used only by the signing job.

PublicSourceRepository

Validated public GitHub repository containing the project source.

SecretName

Validated name of a GitHub Actions secret, never a secret value.

SigningSecretNames

Opaque GitHub secret references needed for manual development signing.

TemporaryBranchNamespace

Branch namespace used only for temporary provider job refs.

TrustedSourceRef

Exact trusted branch or tag from which source revisions may be selected.

WorkerDistribution

Trusted macOS worker provisioning policy.

WorkflowConfig

Fully validated inputs for the signed physical-iPhone workflow.

WorkflowFileName

Validated basename for a generated file below .github/workflows/.

WorkflowLimits

Bounded execution and artifact-retention policy.

Enums

WorkflowConfigError

A rejected workflow configuration field.

WorkflowRunTrigger

GitHub event that starts one generated worker workflow.

Constants

MAX_SIGNING_PROFILES

Maximum number of application and extension provisioning profiles exposed to one protected GitHub signing job.

Functions

generate_workflow

Generate a deterministic GitHub Actions workflow.