aarwitz/Tapp Release Gate

Autonomous QA gate for iOS PRs — explores the app on a simulator, replays Tapp Flows, fails on new high/critical issues.

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Stale
License: None

Inputs

name	description	required	default
bundle-id	Bundle identifier of the app under test (e.g. com.example.app)	yes	—
app-path	Path to a prebuilt SIMULATOR .app. If omitted, the action builds one from scheme/project.	no	""
project	Path to the .xcodeproj or .xcworkspace to build (used when app-path is not given)	no	""
scheme	Scheme to build (used when app-path is not given)	no	""
configuration	Build configuration	no	Debug
max-actions	Exploration budget (number of autonomous actions)	no	40
flows	Glob of Flow YAMLs to replay (default: .autotap/flows/*.yml in the workspace, if present)	no	""
baseline	Path to a baseline report JSON to diff against (default: .autotap/baseline.json if present). New high/critical findings vs. this baseline fail the gate.	no	""
fail-on	Gate policy: gate (regressions + failed flows; default), blocked (verdict-based), any (any finding)	no	gate
simulator-device	Simulator device to boot when none is booted	no	iPhone 16 Pro
test-email	Login email for apps behind an auth wall (pass via a secret). Used by the exploration login preamble.	no	""
test-password	Login password for apps behind an auth wall (pass via a secret).	no	""
launch-args	JSON array of app launch arguments, e.g. ["--uitesting"] to bypass login on a supporting build.	no	""
launch-env	JSON object of app launch environment, e.g. {"UI_TEST_BACKEND":"staging"}.	no	""
login-steps	JSON array of explicit login steps for a custom login UI (see .autotap.yml app.login.steps). $TEST_EMAIL/$TEST_PASSWORD are substituted.	no	""
comment-on-pr	Post the report as a sticky comment on the PR (only on pull_request events).	no	true
github-token	Token used to post the PR comment. Defaults to the workflow token.	no	${{ github.token }}

Outputs

name	description
report	Path to the full JSON report (usable as the next baseline)
verdict	The run verdict: ready \| caution \| blocked
gate-failed	true when the gate failed (merge should be blocked)