Pipelineweft: CI Audit

iOS app by Shadowfetch · App Store ID 6792557562 · iOS

Pipelineweft is a private CI workflow security desk for developers, maintainers, consultants, and small platform teams reviewing the code path that builds, signs, publishes, and deploys their software.

Turn visible YAML risks into a line-level remediation register before privileged automation handles code, tokens, artifacts, or deployments.

Key Features

Workflow YAML heuristic import
Mutable action reference detection
Broad permission and trigger screen
Untrusted interpolation findings
Per-job least-privilege notes
Workflow-change ownership register
Remediation artifact export
Repository content stays local
Native structured-file or CSV import
Local PDF, workspace JSON, and domain-artifact export
No account, ads, analytics, tracking, IAP, or subscription

Pipelineweft performs local text heuristics and records review decisions; it does not fetch action source, verify commit provenance, inspect repository settings, or certify a pipeline. Review platform documentation, organization policy, secrets, runners, environments, and called workflows with security owners.

Get it. Pipelineweft: CI Audit is on the App Store for iPhone and iPad.

Privacy and support

Privacy information for Pipelineweft: CI Audit · Support for Pipelineweft: CI Audit

Questions: shadowfetchapps@gmail.com

Pipelineweft: CI Audit · App Store ID 6792557562 · Published by Shadowfetch · shadowfetch.com