ReleaseGuard

Language-agnostic pre-production release safety gate for mobile/app codebases.

ReleaseGuard scans a repo (and optionally a build artifact) for common pre-release mistakes -- debug signing, debuggable flags left on, missing version bumps, stray dev config pointing at prod, etc. -- and prints a PASS/WARN/BLOCK verdict you can wire into CI.

Install

pip install releaseguard

Usage

releaseguard scan --repo /path/to/your/app

Scan a remote repo directly:

releaseguard scan --git-url https://github.com/org/app.git --ref main

Include a build artifact (.apk/.aab/.ipa) in the checks:

releaseguard scan --repo /path/to/your/app --artifact app-release.apk

Or let ReleaseGuard auto-detect and build Android/iOS projects itself:

releaseguard scan --repo /path/to/your/app --auto-build

Emit machine-readable JSON (for CI pipelines):

releaseguard scan --repo /path/to/your/app --json

Run releaseguard scan --help for the full list of options, including custom rule files (--rules / --rules-only) and a prod-config manifest (--config) for ${VAR} interpolation in rules.

Optional AI reasoning layer

Installing the ai extra enables an optional Grok-based summary layer:

pip install "releaseguard[ai]"

Set XAI_API_KEY to enable it, and optionally RELEASEGUARD_MODEL to override the default model (grok-4). Skip it per-run with --no-ai.

License

MIT