Re-sign a build

Re-signing runs on your machine. QuollVault never receives signing keys or passwords.

Android APK/AAB:

export QUOLLVAULT_SIGNING_PASSWORD='...'
export QUOLLVAULT_KEY_PASSWORD='...'
quollvault resign <build-uuid> --keystore ./release.jks --alias release

iOS with an existing identity:

quollvault resign <build-uuid> --profile ./profile.mobileprovision --identity 'Apple Distribution: Example'

iOS with a local P12:

export QUOLLVAULT_SIGNING_PASSWORD='...'
quollvault resign <build-uuid> --profile ./profile.mobileprovision --p12 ./signing.p12

The CLI downloads the source, signs and verifies locally, then uploads a new derived Build in the same App/Environment with source lineage.

Common failures

Missing signer tools, invalid profile/keystore, verification failure or changed source authority all fail closed. Secrets are not passed in command-line arguments.

Related

• Re-signing guide
• Signing troubleshooting