A developer published a PowerShell-based Git Safety Harness that runs six fail-closed checks — repository root, write set, stage set, branch, push URL, and a Gitleaks secret scan — before committing o…
Geoff Huntley released preflight, a local proxy that scans OpenAI-compatible LLM requests and their attachments for secrets before they reach the model, running on 127.0.0.1:8081 in front of the under…
An enterprise platform engineering approach proposes a four-stage DevSecOps CI/CD pipeline for autonomous AI agents, combining secret scanning, AI-augmented code review, prompt security analysis, and …
An engineer's comparison of secret detection tools Gitleaks, TruffleHog, and GitHub Secret Scanning reveals that most CI scanners suffer from alert fatigue due to regex-based false positives. The anal…
Argus, an open-source security scanner that orchestrates 20+ industry-standard tools including Semgrep, Trivy, Gitleaks, tfsec, Checkov, and OWASP ZAP behind a single command and an MCP server, is now…
A developer built Wardrail, an open-source scanner that checks for API-key leaks and security risks in vibe-coded projects. The tool scans Git history, MCP configuration, and Agent instruction files f…
A developer found that AI coding assistants like Cursor, Copilot, Lovable, and Bolt generate code with security flaws such as hardcoded API keys, permissive CORS settings, and missing input validation…
AI coding assistants like Cursor, Claude Code, Copilot, and Windsurf frequently generate code with hardcoded secrets (CWE-798), such as API keys and database credentials, because their training data i…
A developer released CommitGate, a pre-commit code scanner that automatically checks staged changes for security vulnerabilities using Gitleaks and an AI API. The tool aims to help developers catch is…
A developer who has run both approaches in production environments from a 5-person startup to a 200-developer platform org compares AI-based secret scanning with traditional regex-based tools in CI pi…