RevylAI/greenlight

"author": {     "name": "revylai",     "url": "https://revyl.com"

"name": "revylai",     "url": "https://revyl.com"   },

"url": "https://revyl.com"

},   "homepage": "https://github.com/RevylAI/greenlight",   "repository": "https://github.com/RevylAI/greenlight",

"homepage": "https://github.com/RevylAI/greenlight",

"repository": "https://github.com/RevylAI/greenlight",

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

[Credential-related source omitted]

homepage: "https://github.com/RevylAI/greenlight"

Executable file

rm -rf build/

[![Release](https://img.shields.io/github/v/release/RevylAI/greenlight?color=2ea44f)](https://github.com/RevylAI/greenlight/releases)

[![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)

[![Go](https://img.shields.io/badge/go-1.24+-00ADD8?logo=go&logoColor=white)](go.mod)

[![Powered by Revyl](https://img.shields.io/badge/powered%20by-Revyl-1C1833)](https://revyl.com?utm_source=greenlight&utm_medium=readme&utm_campaign=badge)

A static scan can only prove a flow *exists*. `greenlight verify` proves it *works*: it runs your account-deletion, restore-purchases, and Sign in with Apple flows on a cloud device and fails the build if any of them dead-ends. That tier is

# Build from source git clone https://github.com/RevylAI/greenlight.git

git clone https://github.com/RevylAI/greenlight.git

Static checks confirm a flow *exists* in your source. `verify` confirms it *works*, by handing flow-dependent guidelines to the [Revyl](https://revyl.com?utm_source=greenlight&utm_medium=readme&utm_campaign=verify) CLI and running them on a

Unlike every other command here, `verify` is not offline: it needs the [`revyl` CLI](https://docs.revyl.com), an account, and either a registered build or a local artifact passed to `--artifact`. Revyl runs cloud simulators and emulators, s

That is what `greenlight verify` does, and it is why [Revyl](https://revyl.com?utm_source=greenlight&utm_medium=readme&utm_campaign=static-ceiling) exists. Revyl runs mobile tests written in plain English on cloud devices, so the check is "

Start with `--dry-run`. It generates the tests and prints them without touching a device or needing an account, so you can see whether the runtime tier is worth it before you [sign up](https://app.revyl.ai/signup?utm_source=greenlight&utm_m

Greenlight catches App Store rejections. [Revyl](https://revyl.com?utm_source=greenlight&utm_medium=readme&utm_campaign=footer) catches the bugs that get through.

[Start free](https://app.revyl.ai/signup?utm_source=greenlight&utm_medium=readme&utm_campaign=footer) · [Docs](https://docs.revyl.com) · [revyl.com](https://revyl.com?utm_source=greenlight&utm_medium=readme&utm_campaign=footer)

As a little easter egg for reading this far, here is one month of Revyl free: [`ng32jDS9`](https://app.revyl.ai/signup?promo=ng32jDS9&utm_source=greenlight&utm_medium=readme&utm_campaign=easter-egg) :)

Releases are automated with [GoReleaser](https://goreleaser.com) via

`brew install revylai/tap/greenlight` is backed by [`RevylAI/homebrew-tap`](https://github.com/RevylAI/homebrew-tap).

[`RevylAI/homebrew-tap`](https://github.com/RevylAI/homebrew-tap).

This pointer stays because people look for `SKILL.md` here (see [#3](https://github.com/RevylAI/greenlight/issues/3)).

[#3](https://github.com/RevylAI/greenlight/issues/3)).

Executable file

# Build from source git clone https://github.com/RevylAI/greenlight.git

git clone https://github.com/RevylAI/greenlight.git

- Rewrite vague purpose strings with concrete app behavior. - Replace hardcoded IPs with hostnames. - Replace `http://` URLs with `https://`.

- Replace hardcoded IPs with hostnames. - Replace `http://` URLs with `https://`. - Remove debug logs or gate them behind development flags.

- Replace `http://` URLs with `https://`.

Original project and workflow: [RevylAI/greenlight](https://github.com/RevylAI/greenlight).

Executable file

Executable file

Executable file

const baseURL = "https://api.appstoreconnect.apple.com/v1"

issuerID   string 	keyPath    string 	httpClient *http.Client

keyPath    string 	httpClient *http.Client 	token      string

httpClient *http.Client

issuerID: issuerID, 		keyPath:  privateKeyPath, 		httpClient: &http.Client{

keyPath:  privateKeyPath, 		httpClient: &http.Client{ 			Timeout: 30 * time.Second,

httpClient: &http.Client{

Executable file

const ( 	appleAuthURL  = "https://idmsa.apple.com/appleauth/auth"

appleAuthURL  = "https://idmsa.apple.com/appleauth/auth"

ascSessionURL = "https://appstoreconnect.apple.com/olympus/v1/session"

AppleID    string              `json:"apple_id" 	SessionID  string              `json:"session_id" 	Scnt       string              `json:"scnt" 	Cookies    []*SerializedCookie `json:"cookies" 	TeamID     string              `json:"team_id,o

ProviderID string              `json:"provider_id,omitempty"` 	ExpiresAt  time.Time           `json:"expires_at"` 	httpClient *http.Client

ExpiresAt  time.Time           `json:"expires_at"` 	httpClient *http.Client }

httpClient *http.Client

func SignIn(appleID, password string) (*Session, error) { 	jar, _ := cookiejar.New(nil) 	client := &http.Client{

jar, _ := cookiejar.New(nil) 	client := &http.Client{ 		Jar:     jar,

client := &http.Client{

var cookies []*SerializedCookie 	domains := []string{ 		"https://idmsa.apple.com",

domains := []string{ 		"https://idmsa.apple.com", 		"https://appstoreconnect.apple.com",

"https://idmsa.apple.com",

"https://appstoreconnect.apple.com",

"https://apple.com",

Executable file

Executable file

httpClient := &http.Client{Timeout: 10 * time.Second}

Executable file

Executable file

Executable file

Executable file

const greenlightInfoURI = "https://github.com/RevylAI/greenlight"

dim.Fprintln(w, "  Catch more than rejections. Catch bugs.") 	fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com")

fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com") 	fmt.Fprintln(w)

color.New(color.Underline).Fprintln(w, "https://revyl.com")

Executable file

Executable file

dim.Fprintln(os.Stdout, "  Catch more than rejections. Catch bugs.") 	fmt.Fprint(os.Stdout, "  ") 	color.New(color.Underline).Fprintln(os.Stdout, "https://revyl.com")

fmt.Fprint(os.Stdout, "  ") 	color.New(color.Underline).Fprintln(os.Stdout, "https://revyl.com") 	fmt.Println()

color.New(color.Underline).Fprintln(os.Stdout, "https://revyl.com")

Executable file

Executable file

dim.Fprintln(w, "  Catch more than rejections. Catch bugs.") 	fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com")

fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com") 	fmt.Fprintln(w)

color.New(color.Underline).Fprintln(w, "https://revyl.com")

Executable file

Executable file

dim.Fprintln(os.Stdout, "  Catch more than rejections. Catch bugs.") 	fmt.Fprint(os.Stdout, "  ") 	color.New(color.Underline).Fprintln(os.Stdout, "https://revyl.com")

fmt.Fprint(os.Stdout, "  ") 	color.New(color.Underline).Fprintln(os.Stdout, "https://revyl.com") 	fmt.Println()

color.New(color.Underline).Fprintln(os.Stdout, "https://revyl.com")

Executable file

Executable file

Executable file

dim.Fprintln(w, "  Static catches rejections. Revyl catches broken flows.") 	fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com")

fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com") 	fmt.Fprintln(w)

color.New(color.Underline).Fprintln(w, "https://revyl.com")

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

[Credential-related source omitted]

languages: []string{"swift", "objc", "typescript", "javascript"}, 			patterns: []*regexp.Regexp{ 				regexp.MustCompile(`"http://[^"]+"`),

patterns: []*regexp.Regexp{ 				regexp.MustCompile(`"http://[^"]+"`), 				regexp.MustCompile(`'http://[^']+'`),

regexp.MustCompile(`"http://[^"]+"`),

regexp.MustCompile(`'http://[^']+'`),

}, 			ignorePatterns: []*regexp.Regexp{ 				regexp.MustCompile(`(?i)(localhost|127\.0\.0\.1|0\.0\.0\.0|http://example)`),

ignorePatterns: []*regexp.Regexp{ 				regexp.MustCompile(`(?i)(localhost|127\.0\.0\.1|0\.0\.0\.0|http://example)`), 				regexp.MustCompile(`(?i)(w3\.org|xmlns|DTD|doctype)`), // XML/SVG namespace URIs and DTD references are identifiers, not

regexp.MustCompile(`(?i)(localhost|127\.0\.0\.1|0\.0\.0\.0|http://example)`), 				regexp.MustCompile(`(?i)(w3\.org|xmlns|DTD|doctype)`), // XML/SVG namespace URIs and DTD references are identifiers, not network requests 			},

Executable file

Executable file

tsCtx(`const APPLINK = "applinks:unigox.com";`),   // the app's own brand 		jsonCtx(`    "@unigox/web-app-shared": "1.0.0",`), // scoped brand package 		tsCtx(`const api = "https://api.coinbase.com/v2/prices";`),

jsonCtx(`    "@unigox/web-app-shared": "1.0.0",`), // scoped brand package 		tsCtx(`const api = "https://api.coinbase.com/v2/prices";`), 		tsCtx(`const url = "https://www.binance.com/en";`),

tsCtx(`const api = "https://api.coinbase.com/v2/prices";`),

tsCtx(`const url = "https://www.binance.com/en";`),

tsCtx(`const ex = "https://crypto.com/exchange";`),

noFire := []FileContext{ 		tsCtx(`const ai = "https://gemini.google.com/app";`), // Google Gemini, not the exchange

tsCtx(`const ai = "https://gemini.google.com/app";`), // Google Gemini, not the exchange

tsCtx(`const repo = "https://stargate.io/docs";`),    // \bgate anchored, "stargate" excluded

Executable file

Executable file

Executable file

Executable file

[Credential-related source omitted]

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

Executable file

// Only strip when the // is not inside a quoted string, which is the 		// common case for URLs in maven { url "https://..." } lines.

// common case for URLs in maven { url "https://..." } lines.

Executable file

Executable file

Executable file

const ( 	docTargetAPI       = "https://support.google.com/googleplay/android-developer/answer/11926878"

docTargetAPI       = "https://support.google.com/googleplay/android-developer/answer/11926878"

docBillingDeprecat = "https://developer.android.com/google/play/billing/deprecation-faq"

docRestrictedPerms = "https://support.google.com/googleplay/android-developer/answer/14115180"

docForegroundSvc   = "https://support.google.com/googleplay/android-developer/answer/13392821"

docAccountDeletion = "https://support.google.com/googleplay/android-developer/answer/13327111"

docAdvertisingID   = "https://support.google.com/googleplay/android-developer/answer/6048248"

docAppContent      = "https://support.google.com/googleplay/android-developer/answer/9859455"

docProgramPolicy   = "https://support.google.com/googleplay/android-developer/answer/16810878"

docJul2026Policy   = "https://support.google.com/googleplay/android-developer/answer/17134731"

docPageSizes       = "https://developer.android.com/guide/practices/page-sizes"

doc64Bit           = "https://developer.android.com/google/play/requirements/64-bit"

Executable file

Executable file

Executable file

const manifestHeader = `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android"

<manifest xmlns:android="http://schemas.android.com/apk/res/android"

Executable file

Executable file

Executable file

Executable file

Executable file

mustWrite(t, root, "app/build.gradle", "android {\n  defaultConfig {\n    targetSdk = 30\n  }\n}\n") 	mustWrite(t, root, "app/src/main/AndroidManifest.xml", `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.and

mustWrite(t, root, "app/src/main/AndroidManifest.xml", `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.example.app">     <uses-permission android:name="android.permis

<manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.example.app">

mustWrite(t, root, "app/build.gradle", "android {\n  defaultConfig {\n    targetSdk = 36\n  }\n}\n") 	mustWrite(t, root, "app/src/main/AndroidManifest.xml", `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.and

mustWrite(t, root, "app/src/main/AndroidManifest.xml", `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.example.app">     <application />

<manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.example.app">

mustWrite(t, root, "android/app/build.gradle", "android {\n  defaultConfig {\n    targetSdk = 30\n  }\n}\n") 	mustWrite(t, root, "android/app/src/main/AndroidManifest.xml", `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="ht

mustWrite(t, root, "android/app/src/main/AndroidManifest.xml", `<?xml version="1.0" encoding="utf-8"?> <manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.example.demo">     <application />

<manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.example.demo">

mustWrite(t, root, "android/app/build.gradle", "android { defaultConfig { targetSdk = 36 } }") 			mustWrite(t, root, "android/app/src/main/AndroidManifest.xml", 				`<manifest xmlns:android="http://schemas.android.com/apk/res/android" packa

mustWrite(t, root, "android/app/src/main/AndroidManifest.xml", 				`<manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.x"><application /></manifest>`) 			mustWrite(t, root, signal, "{}")

`<manifest xmlns:android="http://schemas.android.com/apk/res/android" package="com.x"><application /></manifest>`)

Executable file

Executable file

Executable file

dim.Fprintln(w, "  Catch more than rejections. Catch bugs.") 	fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com")

fmt.Fprint(w, "  ") 	color.New(color.Underline).Fprintln(w, "https://revyl.com") 	fmt.Fprintln(w)

color.New(color.Underline).Fprintln(w, "https://revyl.com")

Executable file

const ( 	SignupURL  = "https://app.revyl.ai/signup?utm_source=greenlight&utm_medium=cli&utm_campaign=verify" 	InstallCmd = "curl -fsSL https://revyl.com/install.sh | sh"

SignupURL  = "https://app.revyl.ai/signup?utm_source=greenlight&utm_medium=cli&utm_campaign=verify" 	InstallCmd = "curl -fsSL https://revyl.com/install.sh | sh" 	LoginCmd   = "revyl auth login"

InstallCmd = "curl -fsSL https://revyl.com/install.sh | sh"

InstallCmd = "curl -fsSL https://revyl.com/install.sh | sh"

return nil 	} 	return fmt.Errorf("revyl CLI not found or not executable (looked for %q): install it (https://docs.revyl.com) or pass --revyl <path>", c.Bin)

} 	return fmt.Errorf("revyl CLI not found or not executable (looked for %q): install it (https://docs.revyl.com) or pass --revyl <path>", c.Bin) }

return fmt.Errorf("revyl CLI not found or not executable (looked for %q): install it (https://docs.revyl.com) or pass --revyl <path>", c.Bin)

// best-effort (empty until the session registers). Format: // //	https://app.revyl.ai/sessions/<session_id>?wfr=<execution_id>

//	https://app.revyl.ai/sessions/<session_id>?wfr=<execution_id>

return "" 	} 	return fmt.Sprintf("https://app.revyl.ai/sessions/%s?wfr=%s", r.SessionID, r.ExecutionID)

} 	return fmt.Sprintf("https://app.revyl.ai/sessions/%s?wfr=%s", r.SessionID, r.ExecutionID) }

return fmt.Sprintf("https://app.revyl.ai/sessions/%s?wfr=%s", r.SessionID, r.ExecutionID)

[Credential-related source omitted]

Executable file

"passed_steps": 0,   "execution_id": "b990b41a-f777-4239-8701-65535e3cf565",   "report_url": "https://app.revyl.ai/tests/report?taskId=b990b41a-f777-4239-8701-65535e3cf565",

"execution_id": "b990b41a-f777-4239-8701-65535e3cf565",   "report_url": "https://app.revyl.ai/tests/report?taskId=b990b41a-f777-4239-8701-65535e3cf565",   "steps": [

"report_url": "https://app.revyl.ai/tests/report?taskId=b990b41a-f777-4239-8701-65535e3cf565",

"total_steps": 1,   "passed_steps": 1,   "report_url": "https://app.revyl.ai/tests/report?taskId=abc",

"passed_steps": 1,   "report_url": "https://app.revyl.ai/tests/report?taskId=abc",   "steps": [

"report_url": "https://app.revyl.ai/tests/report?taskId=abc",

"failed_steps": 0,   "passed_steps": 0,   "report_url": "https://app.revyl.ai/tests/report?taskId=1a04ac9e-894e-48f2-8ef3-54692700feb4",

"passed_steps": 0,   "report_url": "https://app.revyl.ai/tests/report?taskId=1a04ac9e-894e-48f2-8ef3-54692700feb4",   "steps": []

"report_url": "https://app.revyl.ai/tests/report?taskId=1a04ac9e-894e-48f2-8ef3-54692700feb4",

Executable file

const schemaURL = "https://json.schemastore.org/sarif-2.1.0.json"

Executable file

var buf bytes.Buffer 	if err := Write(&buf, "greenlight", "v1.2.3", "https://example.com", findings); err != nil {

if err := Write(&buf, "greenlight", "v1.2.3", "https://example.com", findings); err != nil {

Executable file

Executable file

// renderTestYAML produces a Revyl test YAML document for a flow, matching the // schema at https://docs.revyl.com/appendix/yaml-test-format. The test name is

// schema at https://docs.revyl.com/appendix/yaml-test-format. The test name is

Executable file

Executable file

"organization": {     "name": "Revyl",     "url": "https://revyl.com"

"name": "Revyl",     "url": "https://revyl.com"   },

"url": "https://revyl.com"

},   "references": [     "https://developer.apple.com/app-store/review/guidelines/",

"references": [     "https://developer.apple.com/app-store/review/guidelines/",     "https://developer.apple.com/design/human-interface-guidelines/",

"https://developer.apple.com/app-store/review/guidelines/",

"https://developer.apple.com/design/human-interface-guidelines/",

"https://developer.apple.com/documentation/storekit",

"https://developer.apple.com/documentation/apptrackingtransparency",

"https://developer.apple.com/documentation/localauthentication",

"https://developer.apple.com/documentation/networkextension/nevpnmanager",

"https://developer.apple.com/help/app-store-connect/",

"https://support.google.com/googleplay/android-developer/answer/16810878",

"https://developer.android.com/google/play/requirements/target-sdk"

# Build from source git clone https://github.com/RevylAI/greenlight.git

git clone https://github.com/RevylAI/greenlight.git

- **Vague purpose strings** → Rewrite to explain specifically WHY the app needs the permission (not just "Camera needed" but "PostureGuard uses your camera to analyze sitting posture in real-time") - **Hardcoded IPv4** → Replace IP addresse

- **Hardcoded IPv4** → Replace IP addresses with proper hostnames - **HTTP URLs** → Change `http://` to `https://` - **Console logs** → Remove or gate behind `__DEV__` flag

- **HTTP URLs** → Change `http://` to `https://`

**Greenlight** is built by [Revyl](https://revyl.com) — the mobile reliability platform.