# Pipelineweft: CI Audit — Harden Workflow YAML

> Harden Workflow YAML (iPhone/iPad app by Robert Corbin.)

- Source: https://appshunter.io/ios/app/pipelineweft-ci-audit/id6792557562 (this page in markdown: same URL + `.md`)
- Developer: [Robert Corbin](https://appshunter.io/developer/1890247992)
- Category: Developer Tools, Utilities
- Price: $2.99
- Age rating: 4+
- Requires: iOS 17.0 · 2 MB
- Languages: American English
- Released: 2026-07-29
- Data updated: 2026-09-01
- User reviews in markdown: https://appshunter.io/ios/app/pipelineweft-ci-audit/id6792557562/reviews.md

## What is Pipelineweft?

Pipelineweft audits GitHub Actions workflow YAML for supply-chain risk — a scored security review of your CI pipeline that runs entirely on your device.

The workbench puts your workflow source and its audit report on one screen: side by side on iPad and other wide displays, one flip apart on iPhone. Edit the YAML in a monospaced editor, tap Run Audit, and the supply-chain posture report updates with a 0–100 score, a findings-by-severity chart, and every finding pinned to its line number with a concrete remediation.

WHAT IT CHECKS
• Actions pinned to tags instead of reviewed 40-character commit SHAs
• Secrets interpolated directly into run: shell text
• Privileged pull_request_target triggers
• write-all token permissions
• Self-hosted runners receiving workflow code
• Missing explicit permissions block (implicit token scope)

FEATURES
• Monospaced YAML editor with autocorrection disabled
• Severity-weighted score — criticals cost more than warnings
• Findings sorted critical-first, each with line number and fix
• Findings-by-severity bar chart
• Executable step count (uses: and run:) at a glance
• Sample workflow included so you can explore every check immediately

PREMIUM BY DESIGN
One-time paid download. No account, no ads, no analytics, no tracking, and no network access at all — your workflow YAML never leaves the device. Works completely offline.


## Version history (last 2 releases)

### 1.1 — 2026-08-31

Pipelineweft now opens directly into a single fast audit workbench: your workflow YAML beside its scored supply-chain report — side by side on iPad, one flip apart on iPhone. Edit the source, tap Run Audit, and get a 0–100 score, a severity chart, and line-numbered findings with concrete remediations.

### 1.0 — 2026-07-29

No release notes.

## More apps by Robert Corbin

- [Daily Word Journey](https://appshunter.io/ios/app/daily-word-journey/id6761548266)
- [Hush Secret Text](https://appshunter.io/ios/app/hush-secret-text/id6761658175)
- [Renew Guard](https://appshunter.io/ios/app/renew-guard/id6761755447)
- [Receipt to PDF](https://appshunter.io/ios/app/receipt-to-pdf/id6761782025)
- [Route Your Pay](https://appshunter.io/ios/app/route-your-pay/id6761783719)
- [Tip Arbiter](https://appshunter.io/ios/app/tip-arbiter/id6761786879)

All apps by Robert Corbin: https://appshunter.io/developer/1890247992

---

*Data collected daily from the US App Store and indexed by [AppsHunter](https://appshunter.io/). User reviews are verbatim App Store reviews. Ratings, prices and chart positions refresh continuously; this snapshot is from 2026-09-01.*