Gate CodePush

After Microsoft retired App Center, teams moved to hosted CodePush services or ran Microsoft's open-sourced server. Each has its own CLI, and each publishes with an access key. Mocco holds that key and releases it to your publishing step after the gate. Set up Release a token to your pipeline first; this page covers the key and the commands for each service.

Store the key on Mocco's OTA updates page, on the Your OTA tool tab, with the tool CodePush (hosted), for example as acme-production. Its provider id is ota-codepush. The released value is in $OTA_TOKEN in the publishing job.

Revopush

Create an access key in Revopush under Settings, then Add new key. Keys belong to your account and expire after 60 days by default. See Revopush CI setup.

npx @revopush/code-push-cli login --accessKey "$OTA_TOKEN"
npx @revopush/code-push-cli release-react <app> android -d Production --description "${GITHUB_SHA}"

Roll back with revopush rollback <app> Production. See releasing and rolling back.

Codemagic CodePush

Generate a key under OTA Updates, then Manage Access Keys. You choose its expiry, it is shown once, and Revoke access in the same place revokes it. See Codemagic CodePush security.

npx @codemagic/code-push-cli login "https://codepush.pro" --accessKey "$OTA_TOKEN"
npx @codemagic/code-push-cli release-react <app> android -d Production

Roll back with code-push rollback <app> Production. See the CLI quick reference.

Bitrise CodePush

The Bitrise CodePush CLI reads a Bitrise API token from BITRISE_API_TOKEN. Prefer a workspace API token limited to Release Management and to the projects that need it, with an expiry date. See workspace API tokens.

export BITRISE_API_TOKEN="$OTA_TOKEN"
codepush push --bundle --platform android --deployment Production --app-version 1.0.0 --app-id <app id>

Roll back with codepush rollback --deployment Production --app-id <app id>. See the Bitrise CodePush CLI.

Self-hosted code-push-server

Microsoft's code-push-server repository is archived. Its CLI, code-push-standalone, is built from that repository. Create a key with code-push-standalone access-key add "mocco-ci" --ttl 30d, then publish with it:

code-push-standalone login https://<your server> --accessKey "$OTA_TOKEN"
code-push-standalone release-react <app> android -d Production

Roll back with code-push-standalone rollback <app> Production. See the CLI README.

Rotate

Keys from all four services expire or can be revoked. Create a new key, choose Rotate on the token's card in Mocco and paste it, then revoke the old key in the service. For services with a default expiry, rotate before the key expires, or the next publish fails.