Solidity合约扫描神器，OpenZeppelin零误报，两行代码集成CI，真正过滤噪音信号。
Article URL: https://github.com/juan23z/openclaw-audit Comments URL: https://news.ycombinator.com/item?id=49099923 Points: 1 # Comments: 0
一键CI检查博客链接预览是否正常，自动检测og:image等标签的HTTP状态，防止社交卡片失效。
The silent bug that quietly kills your click-through You add <meta property="og:image" content="..."> , the preview looks fine when you test it,…
MCP服务器安全评分工具上线，CI集成与采购审查一步到位。
As a security professional whose employer has given Claude and various other AI tooling to everyone at the company, I kept finding myself as the bottl…
防止AI生成代码悄悄腐蚀代码库，用风险阈值守住每一行质量底线。
Article URL: https://github.com/KayhanB21/riskratchet Comments URL: https://news.ycombinator.com/item?id=48700587 Points: 2 # Comments: 0
GitGuardian 自动扫描你的代码仓库，及时发现意外提交的密钥和凭证，防止因 git 误操作导致资产丢失。
Ive been using ClaudeCode, Im not complaining, it could of been any AI, but maybe this new Mythos/Fable release has massively increased attack surface…
自托管通知神器，专为AI代理和服务更新打造，轻松集成Claude Code、GitHub Actions等工具流
Article URL: https://github.com/lbj96347/notifyme Comments URL: https://news.ycombinator.com/item?id=48427167 Points: 2 # Comments: 0
针对 npm 包被植马事件，推荐 Snyk——能自动扫描项目依赖中的恶意包和漏洞，支持 CI/CD 集成，实时守护密钥与凭据安全。
IT之家 6 月 2 日消息，科技媒体 bleepingcomputer 昨日（6 月 1 日）发布博文，报道称 Red Hat 名下 `@redhat-cloud-services` 命名空间超过 30 个 npm 包遭供应链攻击， 遭到攻击者投放 Shai-Hulud 新变种“Miasma”。 …