In fact, there are 2 root cause :
project.pbxproj
, ensure that the following line is correct :CODE_SIGN_IDENTITY = "Apple Distribution";
apple-actions/import-codesign-certs@v1
for CI/CD, ensure that the certicate used has only one certificate. Multi-certificates is not correctly managed, I don't know why.