Configure .gitignore

Last updated 2026-10-07

Keep secrets and generated output out of the repository. These entries extend the list from fastlane's source-control guide with the framework's own outputs.

.gitignore

.env
.env.*
!.env.example
dist/
vendor/bundle/

# Fastlane generated files
fastlane/report.xml
fastlane/test_output
fastlane/screenshots
fastlane/Preview.html
fastlane/.setup_state.yml

# Credentials
firebase-service-account*.json
service-account*.json
*.p8

# Local match data
fastlane/match

Commit these: fastlane/config/profiles/*.yml (saved setups), Gemfile.lock and .env.example. They contain no secrets.

Warning: never put Firebase credentials, .p8 keys or tokens in the repository. If one is ever committed, rotate it. Removing the file does not remove it from git history.

my-app — zsh

~/my-app $ git check-ignore -v .env fastlane/firebase-service-account.json dist/MyApp.apk
.gitignore:1:.env	.env
.gitignore:13:firebase-service-account*.json	fastlane/firebase-service-account.json
.gitignore:4:dist/	dist/MyApp.apk

git check-ignore confirms which rule ignores each file.

Official documentation

Was this helpful?

PreviousInstall & verify dependencies NextAdd the framework to your project