Support

Import workflow YAML offline, find mutable actions, broad token permissions, risky triggers, and untrusted interpolation, then export a remediation plan.

Start with the included sample

The app opens with a complete local sample workspace, so every main workflow can be reviewed without an account or external hardware.

Reset local data

Use the restore sample action in the editable workspace screen. This replaces the app's local workspace only.

Contact

Email support@shadowfetch.com with the app name, iOS version, device model, and steps that reproduce the issue. Do not include confidential field data.

Pipelineweft performs local text heuristics and records review decisions; it does not fetch action source, verify commit provenance, inspect repository settings, or certify a pipeline. Review platform documentation, organization policy, secrets, runners, environments, and called workflows with security owners.