Use an AppStoreConnect API key instead of username:password for alpha builds

.github/workflows/release-alpha.yml

@@ -33,7 +33,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-gems-
 
-      # Common setup
       - name: Brew bundle
         run:
           brew bundle
@@ -47,24 +46,18 @@ jobs:
           bundle config path vendor/bundle
           bundle install --jobs 4 --retry 3
       
-      # Import alpha release private signing certificate
       - name: Import signing certificate
         uses: apple-actions/import-codesign-certs@v1
         with:
           p12-file-base64: ${{ secrets.ALPHA_CERTIFICATES_P12 }}
           p12-password: ${{ secrets.ALPHA_CERTIFICATES_P12_PASSWORD }}
 
-      # Main step
-      # The Ad-hoc release link will be referenced as 'DIAWI_FILE_LINK'
-      # and QR link as 'DIAWI_QR_CODE_LINK' when the Diawi upload succeed
       - name: Build alpha
         run: bundle exec fastlane alpha
         env:
-          # Automatically bypass 2FA upgrade if possible on Apple account.
+          APPSTORECONNECT_KEY_ID: ${{ secrets.APPSTORECONNECT_KEY_ID }}
-          SPACESHIP_SKIP_2FA_UPGRADE: true
+          APPSTORECONNECT_KEY_ISSUER_ID: ${{ secrets.APPSTORECONNECT_KEY_ISSUER_ID }}
-          APPLE_ID: ${{ secrets.FASTLANE_USER }}
+          APPSTORECONNECT_KEY_CONTENT: ${{ secrets.APPSTORECONNECT_KEY_CONTENT }}
-          FASTLANE_USER: ${{ secrets.FASTLANE_USER }}
-          FASTLANE_PASSWORD: ${{ secrets.FASTLANE_PASSWORD }}
           DIAWI_API_TOKEN: ${{ secrets.DIAWI_API_TOKEN }}
           GITHUB_PR_NUMBER: ${{ github.event.number }}
 

fastlane/Fastfile

@@ -19,6 +19,12 @@ lane :alpha do
     code_sign_identity: code_signing_identity
   )
 
+  app_store_connect_api_key(
+    key_id: ENV["APPSTORECONNECT_KEY_ID"],
+    issuer_id: ENV["APPSTORECONNECT_KEY_ISSUER_ID"],
+    key_content: ENV["APPSTORECONNECT_KEY_CONTENT"]
+  )
+
   get_provisioning_profile(
     app_identifier: bundle_identifier,
     provisioning_name: provisioning_profile_name,