@Tfsir_ai · X

@tschnelli · X

@Gallagh819 · X

@integ_web · X

~*OpenEd* _Edtech is broken, we are fixing it._

@manixh · X

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

u/DistinctPicture4660 · Reddit

I built a security scanner that checks every GitHub push and tells AI exactly how to fix the issues Hello, As a developer, I ship a lot of code with Claude Code, and I've used pretty much every security scanner out there. Most of them are great at telling you what's wrong. Then they leave you with a long report, and you're back to copying logs into Claude or Cursor, asking your AI to figure out how to fix everything. I wanted something that fit the way many of us build software today.

@void_rags · X

Introducing Orqis AI, an AI Watchdog that also fixes Agents. Have a look:

@RHMDigitalSeo · X

u/Dizziesdayweigh · Reddit

This crypto trend tracker was created by Moonshift.io in minutes. Check it out! I have already share 2 apps created by Moonshift, one that parses recipes from recipe site URLs to make a personal cookbook, and one that searches recipes based on ingredients that you input; now to digress from food related apps. This crypto trend tracker was created by a moonshift user for personal use. This is just one more example of what moonshift is capable of. You'll need to sign in to use it. I will

@manoj_surya_ · X

I just launched 🚀 A Proof of Ship, every day — straight from your GitHub. You already do the hard part: you commit. git-to-x turns that into a designed card and posts it to X every morning. Your timeline finally looks like what you actually are — someone who ships. → 8 card designs, rotating (terminal, heatmap, flame, ticker…) so it never gets stale → weekly + monthly milestone cards — your streak becomes a story worth following → tweet from your CLI / Cursor / Claude Code without leaving your editor → free for 10 days, full access See who else is shipping daily under #proofofship — and join them. It touches your repo, so safe-to-try came first: → open source (AGPL) — audit it or self-host → read-only — we never touch your code This is my first build-in-public tool. I built it for myself, and for anyone tired of switching between shipping and posting about shipping. First 100 get founding lifetime — a permanent number on every card. Try it, tell me

jallmann · HN

> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com