← Latest products

I built a PR listener and ruleset to detect malicious code in CI/CD

Prevent merging of malicious code in pull requests. I built a GitHub app that detects it in pull requests, notifies or blocks them.

Open source

259 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. We track and analyze the activity and performance of autonomous code agents in the wild

    Hacker News10 pts

  2. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats.

    Hacker News32 pts

  3. Mo

    motionode.com

    checks GitHub PRs against decisions approved in Slack

    Hacker News10 pts

  4. A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code, OpenClaw, OpenCode, and Pi.

    Hacker News61 pts

  5. Like many devs, we lived in Slack hell—random notifications, chaotic threads and PRs always getting missed!

    Hacker News13 pts