Integrations
HexSign plugs into the tools you already ship with.
A GitHub Action, a fastlane plugin, and a Bitrise Step so CI fetches the right signing material before xcodebuild. Email, Slack, and Microsoft Teams so a forgotten certificate is the system's problem, not yours.
CI / CD
Wire signing into your pipeline.
Each integration is a thin wrapper around the same hexsignCLI, so you keep one mental model whether you're on GitHub Actions today and Bitrise tomorrow.
GitHub Actions
Install the CLI on a runner in one step
The Setup HexSign CLI action installs the binary, verifies its SHA-256 checksum, and (optionally) flips into machine mode using your service credential — so the next steps can `hexsign certificates download` before xcodebuild.
fastlane
Drop two actions into your lane
`fastlane-plugin-hexsign` adds `hexsign_certificates_download` and `hexsign_profiles_download`. Pull the right `.p12` and `.mobileprovision` by ID, hand them to `import_certificate` and `gym`, ship.
Bitrise
A single Step before xcode-archive
`hexsign-fetch-signing-material` downloads the certificate, the profile, or both, exposing paths as env vars for `certificate-and-profile-installer`, `xcode-archive`, or `fastlane`. Service credentials live in workflow secrets.
HexSign CLI
The binary behind every integration
Every integration above shells out to the `hexsign` CLI. If your CI is none of the above (Jenkins, CircleCI, Buildkite, self-hosted), install the binary and the same `download` commands work the same way.
Alerts
Get notified before something expires.
Configure thresholds at 90, 60, 30, 14, and 7 days, route them to any combination of channels, and send a test alert per channel before enabling delivery.
Address lists, no user account required
Send threshold alerts to any address — including distribution lists like `ios-releases@your-team.com`. Recipients don't need a HexSign account. Test each threshold before flipping it live.
Slack
Incoming webhook into the channel of your choice
Add the Incoming Webhooks app to your workspace, paste the URL into HexSign, send a test alert to confirm wiring. Post to `#releases`, `#ios-on-call`, or wherever the right humans live.
Microsoft Teams
Workflow connector into a channel
Create an incoming webhook on a Teams channel, paste the URL into HexSign. Same threshold logic as email and Slack, with a per-channel test alert before you enable delivery.
Need an integration that isn't here yet? The CLI and REST API can drive anything HexSign does, so you can wire it into Jenkins, CircleCI, Buildkite, GitLab CI, or anything else that runs a shell. Tell us what you'd like to see — that's how the GitHub Action, fastlane plugin, and Bitrise Step got built.
Plug it in
Stop committing signing material to repos.
Connect HexSign to your CI and your alerts channel in an afternoon. Free 7-day trial, no credit card.