GitHub Actions Pipeline
- Use GitHub Actions as the primary CI/CD platform
- Trigger on
push to main and on all Pull Requests - Pipeline MUST include these stages in order:
Stage 1: Quality Gate
- name: Analyze
run: flutter analyze --fatal-infos --fatal-warnings
- name: Format Check
run: dart format --set-exit-if-changed .
- name: Run Tests
run: flutter test --coverage
- Zero warnings policy —
--fatal-infos ensures no info-level issues pass - Format check MUST use
--set-exit-if-changed to enforce consistent formatting
Stage 2: Build
- name: Build APK
run: flutter build apk --flavor prod --dart-define-from-file=config/prod.json --release
- name: Build IPA
run: flutter build ipa --flavor prod --dart-define-from-file=config/prod.json --release --export-options-plist=ios/ExportOptions.plist
- Always build with
--flavor prod and --dart-define-from-file=config/prod.json - Use a single
main.dart — do NOT pass -t lib/main_prod.dart
Stage 3: Deploy (on main merge only)
- Upload to Firebase App Distribution for internal testing
- Upload to Google Play Internal Track / TestFlight for staging
- Production release requires manual approval gate
Versioning Strategy
- Follow Semantic Versioning:
MAJOR.MINOR.PATCH+BUILD - Bump
PATCH for bug fixes, MINOR for features, MAJOR for breaking changes - Set version in
pubspec.yaml: version: 1.2.3+45 - The
+BUILD number MUST auto-increment in CI (use build number from CI environment)
Code Signing
- Store signing keys and certificates in GitHub Secrets (never in repo)
- Android: Store keystore as base64-encoded secret, decode in CI
- iOS: Use App Store Connect API key for automated signing
- NEVER commit
*.jks, *.keystore, *.p12, or *.mobileprovision files
PR Requirements
- All PRs MUST pass: analysis (0 warnings), formatting, and tests before merge
- Require at least 1 code review approval
- Branch protection on
main: no direct pushes, require status checks
Release Checklist
- Version bumped in
pubspec.yaml - CHANGELOG.md updated
- All tests passing on CI
- Build succeeds for both Android and iOS
- Tested on physical device with production flavor
- Git tag created matching version (
v1.2.3)
