upload to internal TestFlight

Author: weitingsun

.github/workflows/runway_ios_rc_workflow.yml

@@ -217,12 +217,14 @@ jobs:
           APP_STORE_CONNECT_API_KEY_KEY_CONTENT: ${{ secrets.APP_STORE_CONNECT_API_KEY_KEY_CONTENT }}
 
       - name: Upload to TestFlight
+        env:
+          # Runway / GH apple env uses a restricted key; Bitrise keeps default external distribution.
+          TESTFLIGHT_DISTRIBUTE_EXTERNAL: 'false'
         run: |
           bash scripts/upload-to-testflight.sh \
             "github_actions_main-rc" \
             "${{ inputs.ref || github.ref_name }}" \
-            "${{ steps.ipa.outputs.path }}" \
-            "MetaMask BETA & Release Candidates"
+            "${{ steps.ipa.outputs.path }}"
 
       - name: Cleanup API Key
         if: always()

ios/fastlane/Fastfile

@@ -20,7 +20,12 @@ platform :ios do
     # Convert groups parameter to array (Fastlane CLI passes strings, not arrays)
     groups_param = options[:groups] || ['MetaMask BETA & Release Candidates']
     groups = groups_param.is_a?(Array) ? groups_param : [groups_param]
-    notify_external_testers = true
+    # Default: distribute to external TestFlight groups (matches historical Fastlane / Bitrise behavior).
+    # Set TESTFLIGHT_DISTRIBUTE_EXTERNAL=false (or 0/no/off) when the API key cannot manage beta groups
+    # (upload still succeeds for internal TestFlight; external step would return "forbidden for security reasons").
+    tf_ext = ENV.fetch('TESTFLIGHT_DISTRIBUTE_EXTERNAL', 'true').to_s.strip.downcase
+    distribute_external = !%w[false 0 no off].include?(tf_ext)
+    notify_external_testers = distribute_external
 
     if ipa_path.nil? || ipa_path.empty?
       UI.user_error!("You must provide an ipa_path using ipa_path: '/path/to/app.ipa'")
@@ -93,14 +98,15 @@ platform :ios do
     )
 
     # Upload to TestFlight with API key from app_store_connect_api_key action
-    upload_to_testflight(
+    upload_params = {
       api_key: api_key,
       ipa: ipa_path,
-      distribute_external: true,
-      groups: groups,
+      distribute_external: distribute_external,
       notify_external_testers: notify_external_testers,
       changelog: changelog_message
-    )
+    }
+    upload_params[:groups] = groups if distribute_external
+    upload_to_testflight(**upload_params)
   end
 end
 

ios/fastlane/README.md

@@ -4,7 +4,7 @@ This Fastlane configuration handles uploading iOS builds to TestFlight via Bitri
 
 ## Overview
 
-The `upload_to_testflight_only` lane uploads pre-built IPA files to TestFlight and distributes them to external testing groups.
+The `upload_to_testflight_only` lane uploads pre-built IPA files to TestFlight and, by default, distributes them to external testing groups (same as historical Bitrise behavior). Set `TESTFLIGHT_DISTRIBUTE_EXTERNAL=false` (or `0`, `no`, `off`) for upload-only when the App Store Connect API key cannot manage external beta groups.
 
 ## GitHub Actions
 

scripts/upload-to-testflight.sh

@@ -14,6 +14,8 @@
 #
 # Environment variables:
 #   IPA_PATH - IPA path (set by find-ipa-file.sh if not provided as argument)
+#   TESTFLIGHT_DISTRIBUTE_EXTERNAL - Default "true": distribute to external TestFlight groups after upload.
+#     Set to "false" (or 0/no/off) for upload-only when the API key lacks App Manager access to beta groups.
 
 set -e