asc ipa-info: one offline command to verify IPA signatures, page hashes, and cert chains
rudrank · x · 2026-09-29
App Store Connect CLI 5.8.0 ships fully offline signature verification: asc ipa-info --verify-signature checks an IPA or Mac package's signature, every page hash, and the certificate chain to Apple's root — no Xcode, network, Keychain, or codesign. Non-valid results exit 1, making it a natural CI gate. The open-source repo (rorkai/App-Store-Connect-CLI, 7.5k stars) also automates TestFlight, builds, submissions, signing, and screenshots.
Related event: App Store Connect CLI 5.8.0 Adds Offline Signature Verification(4 posts)→
More from coding & agent
- The hidden primitive behind Claude Code, Codex and Gemini: verifiers agents can't see — bibryam · 2026-09-29
- Solo dev weighs $5k-$20k local AI upgrade: dual RTX 3090 rig vs clustered DGX Spark GB10 — ChopSticksPlease · 2026-09-29
- Reddit thread: how should agents log the decisions where they choose not to act? — daani_maas · 2026-09-29
- On open-ended bug-fixing tasks, Astra averages 222 turns vs Sonnet 5.5's 1330 — PawelHuryn · 2026-09-29
- Claude Code user wants a default-model setting for workflow subagents after runaway 200-agent session — Liu_eroteme · 2026-09-29
- When Shopify WebMCP checkout disagrees with the visible UI, who should the agent trust? — daani_maas · 2026-09-29