A while back I wrote about the GitHub Actions pipeline I built to ship Citolex to the App Store without ever owning a Mac. The pipeline itself hasn't changed much, but how you set it up has.
Until now, using it meant downloading a template and running a setup script yourself. That's fine for most developers, but it's still a terminal and a handful of manual steps between paying and having a working pipeline.
I built a hosted version instead. You pay, connect your GitHub account through a real OAuth flow, and pick or create a repo. A wizard commits the full pipeline template directly into it using GitHub's Git Data API, no git required on your end. Then it walks you through filling in your signing secrets, with an inline Signing Doctor check that tells you exactly what's wrong with a certificate or provisioning profile before you ever trigger a build, not after one fails. If a build does fail, the same wizard reruns that diagnosis automatically against your current secrets and shows it right next to the failed logs.
The signing diagnosis itself doesn't shell out to any macOS specific tooling. Provisioning profiles are signed CMS/PKCS7 blobs, certificates are X.509, keystores are PKCS12, all standard crypto formats that Web Crypto can parse directly. That's what let this run as a Cloudflare Worker instead of needing an actual Mac or VM behind it.
If you've been meaning to try it, it's $1 for the next 24 hours instead of the usual $99 for iOS or $39 for Android, mostly to get more people actually running it end to end rather than reading about it.
Full disclosure, I build Macless. macless.dev if you want to poke at it.
Top comments (0)