AWS CodePipeline status in your Mac menu bar
ShipBoard shows every stage of your CodePipeline pipelines in the macOS menu bar — across AWS profiles and regions — and sends a native notification the moment a run fails. It reads your existing ~/.aws profiles, read-only, so there’s no console tab to keep open.
What you see for each pipeline
- Every stage as a row of dots: green when it succeeded, amber while it runs, red when it failed.
- Expand a pipeline to see each action’s status, when it last ran, and the AWS error code and message when it fails.
- An Open in browser link on each action that jumps to that action’s execution details.
- The commit message that started the run, when the source action reports one.
- Pipelines grouped by
profile · region, so staging and production accounts stay apart.
Set it up
- Make sure the profile works in your terminal:
aws sso login --profile workfor IAM Identity Center (SSO), oraws configure --profile personalfor an access key. - In ShipBoard, click + and choose AWS.
- Pick the profile and region, then tick the pipelines you want on the board.
- When an SSO session expires, the group shows Log in to AWS, which runs
aws sso loginfor that profile.
What access ShipBoard needs
| Credential | A named profile from ~/.aws/config and ~/.aws/credentials — SSO or access keys. ShipBoard never copies it anywhere. |
|---|---|
| IAM actions | codepipeline:ListPipelines, codepipeline:GetPipeline, codepipeline:GetPipelineState |
| Managed policy | AWS’s AWSCodePipelineReadOnlyAccess covers all three. |
ShipBoard only reads. It can’t start, stop, retry or approve anything. If you’d rather not attach a managed policy, this is the whole policy it needs:
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"codepipeline:ListPipelines",
"codepipeline:GetPipeline",
"codepipeline:GetPipelineState"
],
"Resource": "*"
}]
}
Good to know
- Checks every 30 seconds by default (15 seconds to 5 minutes), and every 15 seconds while AWS can’t be reached.
- Works with any profile the AWS CLI can use, including SSO. ShipBoard doesn’t assume roles beyond what the profile itself defines.
- The region list covers 20 common regions, plus your profile’s default region.
- The pipeline picker shows the first page of
ListPipelinesresults, so very large accounts may not see every pipeline listed.
AWS CodePipeline FAQ
Does ShipBoard need my AWS secret keys?
No. It resolves your named profile the same way the AWS CLI does. Access keys stay in your credentials file and SSO tokens stay in the CLI’s cache; nothing is copied, and nothing is sent anywhere except to AWS.
Can I watch pipelines in several accounts and regions?
Yes. Each profile and region pair is its own group on the board, and you can add as many as you like.
What happens when my SSO session expires?
That group shows an error with a Log in to AWS button, which runs aws sso login for the profile. The pipelines refresh once you’re signed in.
Will it tell me when a pipeline fails?
Yes. macOS shows a native notification when a pipeline goes from running to failed, and optionally when it succeeds. You can turn each one off in Settings.
Can ShipBoard change or re-run my pipelines?
No. It only calls three read-only APIs, so even a profile with broader permissions is only ever used to read status.