xiry.

Development · Web app

greenlight

Pre-submission compliance scanner for App Store and Google Play guidelines.

From the Xiry library · Updated 10 October 2026

Visit github.com ↗

greenlight is an open-source CLI tool that scans mobile source code, manifests, and compiled binaries (IPA, APK, AAB) against Apple and Google review guidelines. It operates completely offline with zero file uploads and classifies issues into clear severity tiers. Because it integrates directly as an AI agent skill (such as Claude Code or Codex), coding assistants can run preflight scans, detect guideline violations, and patch the source code automatically until the build passes.

What it's for

  • Scan iOS and Android source files and binaries for App Store and Google Play compliance issues before submission
  • Pair with AI agents like Claude Code to automatically detect and patch guideline rejections
  • Gate mobile CI/CD pipelines to fail builds when critical compliance violations are introduced
  • Detect missing privacy manifests, hardcoded secrets, and non-compliant in-app purchase setups

Features

  • Offline scanning with no account required and zero file uploads
  • Cross-platform guideline checks covering code, privacy manifests, Android manifests, and IPA/APK/AAB binaries
  • Native plugin and skill support for Claude Code and Codex
  • Three-state verdict system: GREENLIT, NEEDS REVIEW, or NOT READY
  • CI-friendly non-zero exit code flags for automated gating
  • Pre-packaged binaries distributed via Homebrew and GitHub releases

Pricing

Open source. Free and open-source under the MIT license

Details

Type
Web app
Category
Development
Topic
Mobile Development
Open source
Yes
Platforms
Command line, macOS, Linux
For
Mobile app developers building for iOS and Android.
Alternative to
fastlane
Tags
ios, android, app store, compliance, cli, claude code

Why it was saved

  • @RoundtableSpace, 12 February 2026: Scans an iOS app (source and .ipa) against App Store guidelines — secrets, in-app purchase rules, privacy manifests, purpose strings, metadata — reports critical/warn/info findings, and can fix them iteratively until the scan is GREENLIT.

Related

Updated