CI/CD Guides
Run protected builds in CI with deterministic outputs.
Pipeline placement
Run ObfGuard after compilation and signing steps. Store protection reports as build artifacts for audit and debugging.
Recommended pipeline
- Compile release build
- Run ObfGuard with policy
- Upload protected binary
- Archive protection report
Sample CI snippet
- name: Protect build run: obfguard build --policy policies/ci.yaml --input build/release/app.apk - name: Upload report run: upload-artifact build/reports/obfguard.json
Determinism
Policy versioning ensures repeatable outputs. Pin ObfGuard versions to keep builds stable.
Use the protection report diff to track policy changes over time.
Checklist before release
- Verify policy file version and checksum
- Confirm protection report is archived
- Validate release artifacts in staging
- Record policy changes in release notes
Need help with CI configuration?
We can help map ObfGuard to your pipeline and release stages.