Invite-only early access
Ship with certainty.
ShipWright is a safe and auditable release agent. It reviews every pull request, runs real checks, and tells you whether it's ready to ship.
See it in action
Every pull request gets a second look
- Open a PR. ShipWright starts reviewing as soon as it lands.
- It flags what matters. A comment on the exact line, with the impact and a fix.
- Push the fix. It reviews again and turns the check green when it's safe to ship.
Add password reset flow #128
Ready to mergemaya wants to merge 2 commits into main
41 def reset_password(token, new_password):42 user = User.query.filter_by(reset_token=token).first()43+ user.set_password(new_password)44+ if user.reset_expires_at < utcnow():45+ raise TokenExpired()46+ user.reset_token = None47+ db.session.commit()
Expire and clear reset tokenIllustrative example of a ShipWright review.
What it does
A reviewer that shows its work
Reviews every pull request
Inline comments on the exact lines that need attention, in minutes, on every push.
Runs real checks
Tests, static analysis, dependency and policy checks, chosen by how risky the change is.
Gives a clear verdict
Ship or don’t ship, as a GitHub check, with the evidence and reasoning behind it.
Who it's for
Built for teams shipping faster than they can review
Teams using coding agents
Agents write code faster than people can review it. ShipWright keeps up and checks the work instead of trusting it.
Small teams without a reviewer to spare
A careful second pair of eyes on every PR, without waiting for someone to free up.
Teams that answer to auditors
Every release decision comes with a replayable record of what ran and why.
Early access is invite-only.
We onboard teams in small batches and set each one up by hand. It's free while we're in early access.
shipwright-agent botResolved
Shipwright · HIGH Reset token is never expired or cleared.
Impact: an old or leaked reset link can change the password again.
Suggested fix: check
reset_expires_atand clearreset_tokenbefore committing.