[GH-ISSUE #589] feat: Provide an official GitHub Action for installing/authing asc #165

New issue

Closed

opened 2026-02-26 21:33:51 +03:00 by kerem · 1 comment

kerem commented

2026-02-26 21:33:51 +03:00

Owner

Originally created by @rudrankriyam on GitHub (Feb 17, 2026).
Original GitHub issue: https://github.com/rudrankriyam/App-Store-Connect-CLI/issues/589

Summary

Publish a reusable GitHub Action that makes using asc in CI dead simple.

Goal: users can do this in a workflow without custom curl scripts:

- uses: rudrankriyam/setup-asc@v1
  with:
    version: latest

- run: asc apps list --paginate

Why this matters

The repo already has internal CI workflows, but end users still need to:

figure out install steps
manage caching
wire credentials safely

A first-party action increases adoption and reduces support burden.

Current state (verified)

.github/workflows/* exist for this repo’s CI.
There is no .github/actions/* directory and no action.yml published for consumers.

Proposed UX

Action: `setup-asc`

Inputs (proposal):

version: latest | 0.28.10 | main (default latest)
cache: true|false (default true)

Outputs:

asc-path: path to installed binary
asc-version: resolved version

Behavior:

Installs asc deterministically (release asset preferred)
Adds to PATH
Optionally caches download

Authentication guidance

Do NOT bake secrets into the action.
Instead, document best practice:

use GitHub Actions secrets for ASC_KEY_ID, ASC_ISSUER_ID, ASC_PRIVATE_KEY_B64
set ASC_BYPASS_KEYCHAIN=1 in CI

Implementation notes

Decide where the action lives:
- same repo under .github/actions/setup-asc/action.yml, or
- separate repo rudrankriyam/setup-asc
Ensure Windows/macOS/Linux support.
Keep logs free of secrets.

Test plan

CI workflow that uses the action to install asc and runs asc version on all OSes
Basic integration test that runs a --help command

Acceptance criteria

Action is documented in README/docs.
Action supports Linux/macOS/Windows.
Users can install asc without custom scripts.
Secrets never printed.

Originally created by @rudrankriyam on GitHub (Feb 17, 2026). Original GitHub issue: https://github.com/rudrankriyam/App-Store-Connect-CLI/issues/589 ## Summary Publish a reusable GitHub Action that makes using `asc` in CI dead simple. Goal: users can do this in a workflow without custom curl scripts: ```yaml - uses: rudrankriyam/setup-asc@v1 with: version: latest - run: asc apps list --paginate ``` ## Why this matters The repo already has internal CI workflows, but end users still need to: - figure out install steps - manage caching - wire credentials safely A first-party action increases adoption and reduces support burden. ## Current state (verified) - `.github/workflows/*` exist for this repo’s CI. - There is no `.github/actions/*` directory and no `action.yml` published for consumers. ## Proposed UX ### Action: `setup-asc` Inputs (proposal): - `version`: `latest` | `0.28.10` | `main` (default `latest`) - `cache`: `true|false` (default true) Outputs: - `asc-path`: path to installed binary - `asc-version`: resolved version Behavior: - Installs `asc` deterministically (release asset preferred) - Adds to PATH - Optionally caches download ### Authentication guidance Do NOT bake secrets into the action. Instead, document best practice: - use GitHub Actions secrets for `ASC_KEY_ID`, `ASC_ISSUER_ID`, `ASC_PRIVATE_KEY_B64` - set `ASC_BYPASS_KEYCHAIN=1` in CI ## Implementation notes - Decide where the action lives: - same repo under `.github/actions/setup-asc/action.yml`, or - separate repo `rudrankriyam/setup-asc` - Ensure Windows/macOS/Linux support. - Keep logs free of secrets. ## Test plan - [ ] CI workflow that uses the action to install `asc` and runs `asc version` on all OSes - [ ] Basic integration test that runs a `--help` command ## Acceptance criteria - [ ] Action is documented in README/docs. - [ ] Action supports Linux/macOS/Windows. - [ ] Users can install `asc` without custom scripts. - [ ] Secrets never printed.

kerem

2026-02-26 21:33:51 +03:00

closed this issue
added the
enhancement
label

kerem commented

2026-02-26 21:33:52 +03:00

Author

Owner

@rudrankriyam commented on GitHub (Feb 17, 2026):

Published an official setup action: https://github.com/rudrankriyam/setup-asc\n\nUsage:\n\n- uses: rudrankriyam/setup-asc@v1\n with:\n version: latest\n\nIt installs asc from GitHub Releases (with SHA-256 checksum verification) and supports pinned versions + version: main (go install). CI covers ubuntu/macos/windows.

@rudrankriyam commented on GitHub (Feb 17, 2026): Published an official setup action: https://github.com/rudrankriyam/setup-asc\n\nUsage:\n\n- uses: rudrankriyam/setup-asc@v1\n with:\n version: latest\n\nIt installs asc from GitHub Releases (with SHA-256 checksum verification) and supports pinned versions + version: main (go install). CI covers ubuntu/macos/windows.

kerem referenced this issue

2026-02-26 21:34:36 +03:00

[PR #170] [MERGED] audit: fix 7 code quality and security issues #332