eas.json: use env-var ASC_API_KEY_PATH instead of hardcoded machine-specific p8 path (CI/multi-machine portable); add gitleaks allowlist for the public issuer-id false positive

767aaa1a8a120d428a44dfc4d36df554d78af2f0 · 2026-09-15 18:19:03 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Pnon7dut9MfPekhhm9YY4Q

Files touched

A .gitleaksignore
M eas.json

Diff

commit 767aaa1a8a120d428a44dfc4d36df554d78af2f0
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue Sep 15 18:19:03 2026 -0700

    eas.json: use env-var ASC_API_KEY_PATH instead of hardcoded machine-specific p8 path (CI/multi-machine portable); add gitleaks allowlist for the public issuer-id false positive
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_01Pnon7dut9MfPekhhm9YY4Q
---
 .gitleaksignore | 4 ++++
 eas.json        | 5 ++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/.gitleaksignore b/.gitleaksignore
new file mode 100644
index 0000000..e274c2b
--- /dev/null
+++ b/.gitleaksignore
@@ -0,0 +1,4 @@
+# Confirmed false positive: ascApiKeyIssuerId in eas.json is a PUBLIC App Store Connect
+# API issuer identifier (a UUID), not a credential. The actual secret (.p8 private key)
+# is stored OUTSIDE the repo and is never tracked. Allowlisted by gitleaks fingerprint.
+eas.json:generic-api-key:36
diff --git a/eas.json b/eas.json
index c5fc095..ba2358d 100644
--- a/eas.json
+++ b/eas.json
@@ -30,7 +30,10 @@
       "ios": {
         "appleTeamId": "3VAV3KMNZK",
         "ascAppId": "6798763975",
-        "appleId": "steveabramsdesigns@gmail.com"
+        "appleId": "steveabramsdesigns@gmail.com",
+        "ascApiKeyPath": "$ASC_API_KEY_PATH",
+        "ascApiKeyId": "72Y2TZT54R",
+        "ascApiKeyIssuerId": "cfbd63ed-301b-465c-aad7-49e94420ad70"
       }
     }
   }

← fb091d5 eas: pin production ios.image=latest (ITMS-90725 guard) befo · back to Beverlyhillsvideos App · (newest)