2nd/10_Wiki/Topics/Coding/Mobile_CI_CD_Fastlane.md

id, title, category, status, source_trust_level, verification_status, created_at, updated_at, tags, tech_stack, applied_in, aliases

id	title	category	status	source_trust_level	verification_status	created_at	updated_at	tags	tech_stack	applied_in	aliases
mobile-ci-cd-fastlane	Mobile CI/CD — Fastlane / EAS / 자동 배포	Coding	draft	B	conceptual	2026-05-09	2026-05-09	mobile ci fastlane eas vibe-coding	language applicable_to Ruby / TS iOS Android		Fastlane EAS Bitrise Codemagic App Store TestFlight Play Console

Mobile CI/CD

빌드 / 서명 / 업로드 자동화. Fastlane = native, EAS = Expo, Codemagic / Bitrise = 매니지드. Match 로 인증서 공유. 매 PR = 빌드, main = TestFlight + internal track.

📖 핵심 개념

• 인증서 / provisioning: 자동 동기 (Fastlane Match).
• Versioning: Marketing version + build number.
• Track / Channel: internal / beta / production.
• Symbol upload: dSYM / mapping → Crashlytics / Sentry.

💻 코드 패턴

Fastlane (iOS)

# fastlane/Fastfile
default_platform(:ios)

platform :ios do
  desc "Build and upload to TestFlight"
  lane :beta do
    setup_ci if ENV['CI']
    match(type: 'appstore', readonly: ENV['CI'] == 'true')
    increment_build_number(xcodeproj: 'App.xcodeproj')
    build_app(scheme: 'App', export_method: 'app-store')
    upload_to_testflight(skip_waiting_for_build_processing: true)
    upload_symbols_to_crashlytics(dsym_path: 'App.app.dSYM.zip')
  end
end

fastlane beta

Fastlane Match (인증서 git repo)

# fastlane/Matchfile
git_url 'git@github.com:acme/certs.git'
storage_mode 'git'
type 'appstore'
app_identifier ['com.acme.app']

fastlane match appstore
# 인증서 + provisioning 자동 sync

Fastlane (Android)

platform :android do
  desc "Internal track"
  lane :internal do
    gradle(task: 'bundleRelease')
    upload_to_play_store(
      track: 'internal',
      aab: 'app/build/outputs/bundle/release/app-release.aab',
    )
  end
end

GitHub Actions

name: ios-beta
on:
  push: { branches: [main] }
jobs:
  build:
    runs-on: macos-14
    steps:
      - uses: actions/checkout@v4
      - uses: ruby/setup-ruby@v1
        with: { ruby-version: '3.3', bundler-cache: true }
      - uses: actions/setup-node@v4
      - run: yarn install --immutable
      - name: Setup keychain
        env:
          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
          APP_STORE_CONNECT_API_KEY: ${{ secrets.APP_STORE_CONNECT_API_KEY }}
        run: bundle exec fastlane beta

EAS (Expo)

// eas.json
{
  "build": {
    "development": { "developmentClient": true, "distribution": "internal" },
    "preview": { "distribution": "internal", "ios": { "simulator": true } },
    "production": { "autoIncrement": true }
  },
  "submit": {
    "production": {
      "ios": { "ascAppId": "1234567890" },
      "android": { "track": "internal" }
    }
  }
}

eas build --platform all --profile production
eas submit --platform all --profile production

Versioning 자동

# Marketing 은 git tag 또는 package.json 에서, build = CI run number
build = ENV['GITHUB_RUN_NUMBER'] || `git rev-list --count HEAD`.to_i
increment_build_number(build_number: build)

App Store Connect API Key (auth)

app_store_connect_api_key(
  key_id: ENV['ASC_KEY_ID'],
  issuer_id: ENV['ASC_ISSUER_ID'],
  key_content: ENV['ASC_KEY_CONTENT'],
)

session 만료 / 2FA 우회 — 권장.

Symbol 업로드

# iOS Crashlytics
upload_symbols_to_crashlytics(dsym_path: 'App.app.dSYM.zip')

# Sentry
sentry_upload_dif(
  auth_token: ENV['SENTRY_AUTH_TOKEN'],
  org_slug: 'acme', project_slug: 'app',
  path: './App.app.dSYM.zip',
)

# Android — Sentry CLI
sh "sentry-cli upload-proguard --org acme --project app app/build/outputs/mapping/release/mapping.txt"

Beta 사용자 알림 (TestFlight + Slack)

slack(
  message: "iOS beta #{build} uploaded to TestFlight",
  channel: '#mobile',
  default_payloads: [],
)

Production rollout

# Play Console: staged rollout
upload_to_play_store(
  track: 'production',
  rollout: '0.1', # 10% 부터 시작
)

🤔 의사결정 기준

상황	추천
Native iOS / Android	Fastlane + GH Actions
Expo 앱	EAS Build + Submit
매니지드 / 작은 팀	Codemagic / Bitrise
Self-host runner	macOS GH Actions runner (mac mini)
큰 조직	Bitrise / Xcode Cloud
Beta 분배 (외부)	TestFlight + Firebase App Distribution

❌ 안티패턴

• 인증서 수동 공유 (slack): 잃어버림. Match.
• Match git repo public: 보안. Private + encryption.
• Build number 수동 증가: forget. CI 자동.
• dSYM / mapping 누락: prod crash 추적 불가.
• 2FA 수동: CI 못 인증. App Store Connect API key.
• Push to main = prod 자동: 위험. internal → manual promote.
• 모든 PR 가 빌드: 비용. main 만 또는 label 트리거.

🤖 LLM 활용 힌트

• Fastlane Match + ASC API key + dSYM 자동 업로드 3종.
• Internal → beta → production 단계.
• staged rollout 으로 안전 점진.

🔗 관련 문서

• Mobile_E2E_Testing
• Native_Crash_Reporting
• DevOps_CI_CD_Pipeline_Patterns