From bd8ee76289ef7620b5e243bec94d0ca779d52a2d Mon Sep 17 00:00:00 2001
From: James Magahern <james@magahern.com>
Date: Fri, 26 Jun 2026 00:16:56 -0700
Subject: [PATCH] CI diag: inspect keychain search list (temp)

---
 .gitea/workflows/testflight.yml | 1 +
 ios/fastlane/Fastfile           | 7 +++++++
 2 files changed, 8 insertions(+)

diff --git a/.gitea/workflows/testflight.yml b/.gitea/workflows/testflight.yml
index eba1396..6642fcb 100644
--- a/.gitea/workflows/testflight.yml
+++ b/.gitea/workflows/testflight.yml
@@ -62,6 +62,7 @@ jobs:
           MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
           MATCH_GIT_URL: ${{ secrets.MATCH_GIT_URL }}
           MATCH_GIT_BASIC_AUTHORIZATION: ${{ secrets.MATCH_GIT_BASIC_AUTHORIZATION }}
+          SYBIL_VERSION_TAG: "v1.12.1"
           FASTLANE_SKIP_UPDATE_CHECK: "1"
           FASTLANE_XCODEBUILD_SETTINGS_TIMEOUT: "120"
         run: |
diff --git a/ios/fastlane/Fastfile b/ios/fastlane/Fastfile
index 162f322..f85e43e 100644
--- a/ios/fastlane/Fastfile
+++ b/ios/fastlane/Fastfile
@@ -131,6 +131,13 @@ platform :ios do
     identities = sh("security find-identity -v -p codesigning #{ci_keychain_path.shellescape}", log: false)
     UI.message(identities)
 
+    UI.message("===CI-DIAG=== effective keychain search list:")
+    UI.message(sh("security list-keychains", log: false))
+    UI.message("===CI-DIAG=== default keychain:")
+    UI.message(sh("security default-keychain", log: false))
+    UI.message("===CI-DIAG=== find-identity WITHOUT keychain arg (search-list view, what xcodebuild sees):")
+    UI.message(sh("security find-identity -v -p codesigning", log: false))
+
     unless identities.include?(SIGNING_IDENTITY)
       UI.user_error!("The CI keychain search list does not contain #{SIGNING_IDENTITY}")
     end