Pipelineweft: CI Audit
Harden Workflow YAML
$2.99 · Designed for iPad. Not verified for macOS.
A scored, on-device security review of your CI: audit GitHub Actions workflow YAML for supply-chain risk, with the source and its report side by side — no upload.
Pipelineweft audits GitHub Actions workflow YAML for supply-chain risk — a scored security review of your CI pipeline that runs entirely on your device.
The workbench puts your workflow source and its audit report on one screen: side by side on iPad and other wide displays, one flip apart on iPhone. Edit the YAML in a monospaced editor, tap Run Audit, and the supply-chain posture report updates with a 0–100 score, a findings-by-severity chart, and every finding pinned to its line number with a concrete remediation.
WHAT IT CHECKS
• Actions pinned to tags instead of reviewed 40-character commit SHAs
• Secrets interpolated directly into run: shell text
• Privileged pull_request_target triggers
• write-all token permissions
• Self-hosted runners receiving workflow code
• Missing explicit permissions block (implicit token scope)
FEATURES
• Monospaced YAML editor with autocorrection disabled
• Severity-weighted score — criticals cost more than warnings
• Findings sorted critical-first, each with line number and fix
• Findings-by-severity bar chart
• Executable step count (uses: and run:) at a glance
• Sample workflow included so you can explore every check immediately
PREMIUM BY DESIGN
One-time paid download. No account, no ads, no analytics, no tracking, and no network access at all — your workflow YAML never leaves the device. Works completely offline.
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
Pipelineweft now opens directly into a single fast audit workbench: your workflow YAML beside its scored supply-chain report — side by side on iPad, one flip apart on iPhone. Edit the source, tap Run Audit, and get a 0–100 score, a severity chart, and line-numbered findings with concrete remediations.
The developer, Robert Corbin, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- Robert Corbin
- Size
- 2.6 MB
- Category
- Developer Tools
- Compatibility
Requires iOS 17.0 or later.
- iPhone
Requires iOS 17.0 or later. - iPad
Requires iPadOS 17.0 or later. - Mac
Requires macOS 14.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
- English
- Age Rating
4+
- 4+
- Copyright
- © 2026 Robert Corbin
