Mobile Ci Cd

Expo CI workflow structure. A production-grade pipeline:

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  lint-and-test:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4

    - uses: actions/setup-node@v4
      with:
        node-version: 20
        cache: npm

    - run: npm ci

    - name: Type check
      run: npx tsc --noEmit

    - name: Lint
      run: npx expo lint

    - name: Test
      run: npx jest --ci --coverage

  eas-build:
    needs: lint-and-test
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4

    - uses: actions/setup-node@v4
      with:
        node-version: 20
        cache: npm

    - run: npm ci

    - uses: expo/expo-github-action@v8
      with:
        eas-version: latest
        token: ${{ secrets.EXPO_TOKEN }}

    - name: Build
      run: eas build --platform all --profile production --non-interactive

Flutter CI workflow structure.

name: CI

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4

    - uses: subosito/flutter-action@v2
      with:
        channel: stable
        cache: true

    - run: flutter pub get
    - run: flutter analyze
    - run: flutter test --coverage

  build-android:
    needs: test
    if: github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    steps:
    - uses: actions/checkout@v4

    - uses: subosito/flutter-action@v2
      with:
        channel: stable
        cache: true

    - run: flutter pub get
    - run: flutter build apk --release

  build-ios:
    needs: test
    if: github.ref == 'refs/heads/main'
    runs-on: macos-latest
    steps:
    - uses: actions/checkout@v4

    - uses: subosito/flutter-action@v2
      with:
        channel: stable
        cache: true

    - run: flutter pub get
    - run: flutter build ios --release --no-codesign

Manage secrets for code signing. Store credentials as GitHub encrypted secrets:

For Expo/EAS projects, code signing is managed by EAS. You only need EXPO_TOKEN.

For bare React Native or Flutter, decode the keystore in CI:

- name: Decode keystore
  run: echo "${{ secrets.KEYSTORE_BASE64 }}" | base64 -d > android/app/release.keystore

Cache dependencies for faster builds. Node modules and Flutter SDK caching:

# Node (already handled by setup-node cache: npm)
- uses: actions/setup-node@v4
  with:
    node-version: 20
    cache: npm

# Flutter (already handled by flutter-action cache: true)
- uses: subosito/flutter-action@v2
  with:
    channel: stable
    cache: true

# Gradle cache for Android builds
- uses: actions/cache@v4
  with:
    path: |
      ~/.gradle/caches
      ~/.gradle/wrapper
    key: gradle-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}

# CocoaPods cache for iOS builds
- uses: actions/cache@v4
  with:
    path: ios/Pods
    key: pods-${{ hashFiles('ios/Podfile.lock') }}

Add PR preview builds with EAS. Build a preview version on every PR:

Add a preview profile in eas.json:

{
  "build": {
    "preview": {
      "distribution": "internal",
      "channel": "preview",
      "ios": { "simulator": true }
    }
  }
}

Add a workflow job:

preview:
  if: github.event_name == 'pull_request'
  runs-on: ubuntu-latest
  steps:
  - uses: actions/checkout@v4
  - uses: actions/setup-node@v4
    with:
      node-version: 20
      cache: npm
  - run: npm ci
  - uses: expo/expo-github-action@v8
    with:
      eas-version: latest
      token: ${{ secrets.EXPO_TOKEN }}
  - run: eas build --platform all --profile preview --non-interactive

Conditional platform builds. Only build the platform that changed:

changes:
  runs-on: ubuntu-latest
  outputs:
    ios: ${{ steps.filter.outputs.ios }}
    android: ${{ steps.filter.outputs.android }}
  steps:
  - uses: dorny/paths-filter@v3
    id: filter
    with:
      filters: |
        ios:
          - 'ios/**'
          - 'Podfile.lock'
        android:
          - 'android/**'
          - 'build.gradle'

Deploy on merge. Submit to stores automatically when merging to main:

deploy:
  needs: eas-build
  if: github.ref == 'refs/heads/main'
  runs-on: ubuntu-latest
  steps:
  - uses: actions/checkout@v4
  - uses: actions/setup-node@v4
    with:
      node-version: 20
      cache: npm
  - run: npm ci
  - uses: expo/expo-github-action@v8
    with:
      eas-version: latest
      token: ${{ secrets.EXPO_TOKEN }}
  - run: eas submit --platform all --profile production --non-interactive