Sign inSign up

appdome/gitlab_build-2secure

By appdome

•Updated 3 months ago

Secure and customize your mobile apps on Gitlab using the Appdome build-2secure

Image
0

3.6K

appdome/gitlab_build-2secure repository overview

⁠Appdome Build-2Secure

Appdome's Build-2Secure GitLab Job is an out-of-the-box GitLab CI/CD integration, making it easy for mobile developers to automate the build, signing, and certification of security, anti-fraud, and other protections in Android & iOS apps in GitLab CI/CD pipelines. No code and no SDKs are required.

The purpose of Appdome's Build-2Secure Job for GitLab is to streamline and accelerate cyber and anti-fraud delivery in CI/CD pipelines. To do this, the Build-2Secure Job for GitLab automates three important steps in delivering more secure mobile applications to your users fast: (1) building app-level protections into mobile apps, (2) code signing the protected mobile app, and (3) certifying the security of each protected mobile app. The Appdome Build-2Secure Job for GitLab can be used to deliver Certified Secureā„¢ mobile app security, anti-fraud, anti-malware, mobile anti-bot, and other cyber defense updates to mobile apps on the Appdome Cyber Defense Automation Platform. Use this Job for GitLab as a stand-alone DevSecOps integration or in combination with other DevSecOps integrations in your CI/CD pipeline.

For complete documentation, please visit Appdome Gitlab Build-2Secure⁠

⁠Usage Examples:

⁠Android - sign on appdome
image: appdome/gitlab_build-2secure:latest

stages:
  - .pre
  - appdome
  - .post

appdome-job:
  stage: appdome
  tags:
    - <your runner tag>
  variables:
    APP_LOCATION: "<path to app file>"
    APPDOME_API_KEY: "<your appdome api key>"
    APPDOME_ANDROID_FS_ID: "<appdome fusion set id>"
    ANDROID_KEYSTORE_FILE: "<path to keystore file>"
    ANDROID_KEYSTORE_PASSWORD: "<keystore password>"
    KEYSTORE_ALIAS: "<keystore alias>"
    KEYSTORE_KEY_PASSWORD: "<keystore key password>"
    BUILD_WITH_LOGS: "true" - Optional
    BUILD_TO_TEST: "<testing vendor name>" - Optional, one of the following: "lambdatest" | "bitbar" | "browserstack" | "saucelabs"
    SECOND_OUTPUT: "true" - Optional
  script:
    - appdome_android_sign_on_appdome
  artifacts:
    paths:
      - ./appdome_outputs/ - (path where the output will be generated to)
    expire_in: 1 week
⁠Android - private signing
image: appdome/gitlab_build-2secure:latest

stages:
  - .pre
  - appdome
  - .post

appdome-job:
  stage: appdome
  tags:
    - <your runner tag>
  variables:
    APP_LOCATION: "<path to app file>"
    APPDOME_API_KEY: "<your appdome api key>"
    APPDOME_ANDROID_FS_ID: "<appdome fusion set id>"
    SIGN_FINGERPRINT: "<sign fingerprint>"
    BUILD_WITH_LOGS: "true" - Optional
    BUILD_TO_TEST: "lambdatest" | "bitbar" | "browserstack" | "saucelabs" - Optional
    SECOND_OUTPUT: "true" - Optional
  script:
    - appdome_android_private_signing
  artifacts:
    paths:
      - ./appdome_outputs/ - (path where the output will be generated to)
    expire_in: 1 week
⁠Android - auto dev signing
image: appdome/gitlab_build-2secure:latest

stages:
  - .pre
  - appdome
  - .post

appdome-job:
  stage: appdome
  tags:
    - <your runner tag>
  variables:
    APP_LOCATION: "<path to app file>"
    APPDOME_API_KEY: "<your appdome api key>"
    APPDOME_ANDROID_FS_ID: "<appdome fusion set id>"
    SIGN_FINGERPRINT: "<sign fingerprint>"
    BUILD_WITH_LOGS: "true" - Optional
    BUILD_TO_TEST: "lambdatest" | "bitbar" | "browserstack" | "saucelabs" - Optional
  script:
    - appdome_android_auto_dev_signing
  artifacts:
    paths:
      - ./appdome_outputs/ - (this is where where the output will be generated to. do not change this)
    expire_in: 1 week
⁠iOS - auto sign on appdome
image: appdome/gitlab_build-2secure:latest

stages:
  - .pre
  - appdome
  - .post

appdome-job:
  stage: appdome
  tags:
    - <your runner tag>
  variables:
    APP_LOCATION: "<path to app file>"
    APPDOME_API_KEY: "<your appdome api key>"
    APPDOME_IOS_FS_ID: "<appdome fusion set id>"
    IOS_KEYSTORE_FILE: "<path to your iOS keystore file>"
    IOS_KEYSTORE_PASSWORD: "<password for your keystore file>"
    MOBILE_PROVISION_PROFILE_FILES: "<paths to your mobile provision files, seperated by a comma>"
    ENTITLEMENTS_FILES: "<paths to your entitlements files, seperated by a comma>"
    BUILD_WITH_LOGS: "true" - Optional
    BUILD_TO_TEST: "saucelabs" - Optional, only sauclabs supports iOS right now
  script:
    - appdome_ios_sign_on_appdome
  artifacts:
    paths:
      - ./appdome_outputs/ - (this is where where the output will be generated to. do not change this)
    expire_in: 1 week
⁠iOS - private signing
image: appdome/gitlab_build-2secure:latest

stages:
  - .pre
  - appdome
  - .post

appdome-job:
  stage: appdome
  tags:
    - <your runner tag>
  variables:
    APP_LOCATION: "<path to app file>"
    APPDOME_API_KEY: "<your appdome api key>"
    APPDOME_IOS_FS_ID: "<appdome fusion set id>"
    MOBILE_PROVISION_PROFILE_FILES: "<paths to your mobile provision files, seperated by a comma>"
    ENTITLEMENTS_FILES: "<paths to your entitlements files, seperated by a comma>"
    BUILD_WITH_LOGS: "true" - Optional
    BUILD_TO_TEST: "saucelabs" - Optional, only sauclabs supports iOS right now
  script:
    - appdome_ios_private_signing
  artifacts:
    paths:
      - ./appdome_outputs/ - (this is where where the output will be generated to. do not change this)
    expire_in: 1 week
⁠iOS - auto dev signing
image: appdome/gitlab_build-2secure:latest

stages:
  - .pre
  - appdome
  - .post

appdome-job:
  stage: appdome
  tags:
    - <your runner tag>
  variables:
    APP_LOCATION: "<path to app file>"
    APPDOME_API_KEY: "<your appdome api key>"
    APPDOME_IOS_FS_ID: "<appdome fusion set id>"
    MOBILE_PROVISION_PROFILE_FILES: "<paths to your mobile provision files, seperated by a comma>"
    ENTITLEMENTS_FILES: "<paths to your entitlements files, seperated by a comma>"
    BUILD_WITH_LOGS: "true" - Optional
    BUILD_TO_TEST: "saucelabs" - Optional, only sauclabs supports iOS right now
  script:
    - appdome_ios_auto_dev_signing
  artifacts:
    paths:
      - ./appdome_outputs/ - (this is where where the output will be generated to. do not change this)
    expire_in: 1 week

Tag summary

Content type

Image

Digest

sha256:bf460f84e…

Size

313.3 MB

Last updated

3 months ago

docker pull appdome/gitlab_build-2secure