Feat: Automatically detect signing certificate

Sources/VariantsCore/Factory/iOS/XCConfigFactory.swift

@@ -209,9 +209,15 @@ class XCConfigFactory: XCFactory {
             else { return }
 
             let isDistribution = exportMethod == .appstore || exportMethod == .enterprise
-            let certType = isDistribution ? "Distribution" : "Development"
+
             signingSettings[PListKey.provisioningProfile] = "$(V_MATCH_PROFILE)"
-            signingSettings[PListKey.codeSignIdentity] = "Apple \(certType): \(teamName) (\(teamID))"
+
+            if let fetchedSigningIdentity = signing.codeSigningIdentity {
+                signingSettings[PListKey.codeSignIdentity] = fetchedSigningIdentity
+            } else {
+                let certType = isDistribution ? "Distribution" : "Development"
+                signingSettings[PListKey.codeSignIdentity] = "Apple \(certType): \(teamName) (\(teamID))"
+            }
         }
 
         let xcodeFactory = XcodeProjFactory()
@@ -250,8 +256,13 @@ class XCConfigFactory: XCFactory {
             else { return }
 
             let isDistribution = exportMethod == .appstore || exportMethod == .enterprise
-            let certType = isDistribution ? "Distribution" : "Development"
-            signingSettings[PListKey.codeSignIdentity] = "Apple \(certType): \(teamName) (\(teamID))"
+
+            if let fetchedSigningIdentity = signing.codeSigningIdentity {
+                signingSettings[PListKey.codeSignIdentity] = fetchedSigningIdentity
+            } else {
+                let certType = isDistribution ? "Distribution" : "Development"
+                signingSettings[PListKey.codeSignIdentity] = "Apple \(certType): \(teamName) (\(teamID))"
+            }
         }
 
         let xcodeFactory = XcodeProjFactory()

Sources/VariantsCore/Schemas/iOS/iOSSigning.swift

@@ -14,6 +14,12 @@ struct iOSSigning: Codable, Equatable {
     let exportMethod: ExportMethod?
     let matchURL: String?
     let style: SigningStyle
+
+    var codeSigningIdentity: String? {
+        guard let teamID = teamID else { return nil }
+
+        return fetchSigningCertificate(for: teamID)
+    }
 
     enum CodingKeys: String, CodingKey {
         case teamName = "team_name"
@@ -115,3 +121,27 @@ extension iOSSigning {
         return signing
     }
 }
+
+extension iOSSigning {
+    private func fetchSigningCertificate(for teamId: String) -> String? {
+        do {
+            let output = try Bash("security", arguments: "find-identity", "-v", "-p", "codesigning")
+                .capture()
+
+            guard let output else { return nil }
+            let lines = output.split(separator: "\n")
+
+            let matches = lines.compactMap { line -> String? in
+                guard line.contains(teamId) else { return nil }
+
+                let components = line.split(separator: "\"", maxSplits: 2, omittingEmptySubsequences: false)
+                guard components.count > 1 else { return nil }
+
+                return String(components[1])
+            }
+            return matches.first
+        } catch {
+            return nil
+        }
+    }
+}