Verify an IPA signature fully offline with App Store Connect CLI 5.8.0
rudrank · x · 2026-09-29
Developer rudrank demonstrates the new offline signature verification in App Store Connect CLI 5.8.0: asc ipa-info --path ./App.ipa --verify-signature --output needs no Xcode, network, Keychain, or codesign.
The command checks the signature, every page hash, and the certificate chain up to Apple's root, returning exactly one of valid / invalid / untrusted-chain / expired / unsupported. Anything other than valid exits 1, so it drops straight into CI as a gate before upload.
Related event: App Store Connect CLI 5.8.0 Adds Offline Signature Verification(4 posts)→
More from coding & agent
- The hidden primitive behind Claude Code, Codex and Gemini: verifiers agents can't see — bibryam · 2026-09-29
- Solo dev weighs $5k-$20k local AI upgrade: dual RTX 3090 rig vs clustered DGX Spark GB10 — ChopSticksPlease · 2026-09-29
- Reddit thread: how should agents log the decisions where they choose not to act? — daani_maas · 2026-09-29
- On open-ended bug-fixing tasks, Astra averages 222 turns vs Sonnet 5.5's 1330 — PawelHuryn · 2026-09-29
- Claude Code user wants a default-model setting for workflow subagents after runaway 200-agent session — Liu_eroteme · 2026-09-29
- When Shopify WebMCP checkout disagrees with the visible UI, who should the agent trust? — daani_maas · 2026-09-29