- Home
- Code signing
Code signing
During a Bitrise build, you can digitally sign your app regardless of platform. Bitrise has dedicated Steps for both Android and iOS code signing procedures.
Code signing is the process of digitally signing your app, as a means of guaranteeing that the code has not been altered since signing. It provides security for deployment, and identifies the author.
To deploy mobile apps to an online store, such as Google Play or the App Store, code signing is absolutely crucial. On Bitrise, we tried to make it as easy and convenient as possible.
iOS code signing
Every iOS app, native or cross-platform, needs code signing. At the minimum, two files are required:
-
A provisioning profile.
-
A signing certificate.
Automatic and manual code signing asset management
Bitrise supports automatic and manual code signing asset management:
-
The Steps, that support automatic code signing asset management, automatically download provisioning profiles and fix common issues through an already set up API key or Apple ID connection.
-
For manual code signing asset management, you have to manually upload the code signing certificate and provisioning profile to Bitrise and add the Certificate and Profile Installer Step along with a build Step.
Android code signing
Android code signing can be handled via our dedicated Step, via Android Studio, or in your Gradle configuration.
To sign an Android app, you will need a keystore file which requires a Google Play Developer account, and Google Play API access.
An app on Bitrise represents a Git repository that stores source code and has been connected to Bitrise to be able to run builds on it. As such, a Bitrise app isn't necessarily an actual application: it's just the code on which you run builds with Bitrise.