From f6a10af7a9d6345cd0e0e01a68e37b3d44dce13b Mon Sep 17 00:00:00 2001
From: James Magahern <james@magahern.com>
Date: Thu, 25 Jun 2026 23:13:08 -0700
Subject: [PATCH] Use signing certificate identity hash

---
 ios/Apps/Sybil/project.yml | 4 ++--
 ios/fastlane/Fastfile      | 7 ++++---
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/ios/Apps/Sybil/project.yml b/ios/Apps/Sybil/project.yml
index 9c19df9..cc23a2e 100644
--- a/ios/Apps/Sybil/project.yml
+++ b/ios/Apps/Sybil/project.yml
@@ -35,8 +35,8 @@ targets:
       configs:
         Release:
           CODE_SIGN_STYLE: Manual
-          CODE_SIGN_IDENTITY: Apple Distribution
-          "CODE_SIGN_IDENTITY[sdk=iphoneos*]": Apple Distribution
+          CODE_SIGN_IDENTITY: 6B74B268C4761720FB2051D01D8BB3E47B55D9F5
+          "CODE_SIGN_IDENTITY[sdk=iphoneos*]": 6B74B268C4761720FB2051D01D8BB3E47B55D9F5
           PROVISIONING_PROFILE_SPECIFIER: Sybil AppStore CI
 
 schemes:
diff --git a/ios/fastlane/Fastfile b/ios/fastlane/Fastfile
index 9269c09..8f94c52 100644
--- a/ios/fastlane/Fastfile
+++ b/ios/fastlane/Fastfile
@@ -7,7 +7,8 @@ APP_IDENTIFIER = "net.buzzert.sybil2"
 SCHEME = "Sybil"
 TEAM_ID = "DQQH5H6GBD"
 PROFILE_NAME = "Sybil AppStore CI"
-SIGNING_IDENTITY = "Apple Distribution: James Magahern (DQQH5H6GBD)"
+SIGNING_IDENTITY_NAME = "Apple Distribution: James Magahern (DQQH5H6GBD)"
+SIGNING_IDENTITY_SHA1 = "6B74B268C4761720FB2051D01D8BB3E47B55D9F5"
 MATCH_BRANCH = "master"
 IOS_ROOT = File.expand_path("..", __dir__)
 PROJECT_FILE = File.join(IOS_ROOT, "Sybil.xcodeproj")
@@ -72,7 +73,7 @@ platform :ios do
     identities = sh("security find-identity -v -p codesigning #{keychain_path.shellescape}", log: false)
     UI.message(identities)
 
-    unless identities.include?(SIGNING_IDENTITY)
+    unless identities.include?(SIGNING_IDENTITY_NAME)
       UI.user_error!("The CI keychain does not contain the expected Apple Distribution signing identity")
     end
   end
@@ -158,7 +159,7 @@ platform :ios do
 
     if ENV["CI"]
       build_options[:xcargs] = [
-        "CODE_SIGN_IDENTITY=#{SIGNING_IDENTITY.shellescape}",
+        "CODE_SIGN_IDENTITY=#{SIGNING_IDENTITY_SHA1.shellescape}",
         "OTHER_CODE_SIGN_FLAGS=#{("--keychain #{ENV.fetch("MATCH_KEYCHAIN_NAME")}").shellescape}"
       ].join(" ")
     end