Dev tools · alternatives · 2026
24 alternatives to GitHub
Prevent merging of malicious code in pull requests and CI/CD
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 2
PullNotifier▲361Improve productivity for dev teams using Github and Slack
2024 · pullnotifier.com · its alternatives →
- 3
GitHired▲360Hey HN - today I’m launching GitHired. A hiring platform that ranks developers based on what they actually build — not what they claim on a PDF. It’s called GitHired, and here’s the core idea: GitHub > Resumes Instead of trusting “proficient in React” bullet points, we analyze a candidate’s actual GitHub: their real tech stack their most complex projects how active they are what kinds of contributions they make which skills match your job description and yes, we detect fake “green square farming.” Why we built this Because engineering hiring is broken. Resumes are inflated. Activity charts…
Dec 2025 · githired.tech · its alternatives →
- 4

GitHub Gist: instantly share code, notes, and snippets.
2018 · gist.github.com · its alternatives →
- 5

aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.
2015 · appcanary.com · its alternatives →
- 6
GitGuardian▲132Detect secrets in source code, public and private!
2018 · gitguardian.com · its alternatives →
- 7

:cop: GitHub Bot For Validating Pull Request Mergability Requirements and Issues Structure - Schachte/Git-Enforcer
2018 · github.com · its alternatives →
- 8
SafeDep Vet▲72GitLab CI Component that lets you seamlessly protect your pipelines from vulnerable and malicious open source dependencies. The component integrates directly into your CI/CD workflow through the GitLab CI Catalog and allows you to establish policy-driven guardrails using Common Expression Language (CEL). Key features: - Set your own opinionated security policies as code using CEL - Detect and block risky OSS components before they enter your codebase - Seamless integration as a native GitLab CI Component - Available directly in the GitLab CI Catalog Try and lets us know our thoughts!
2023 · safedep.io · its alternatives →
- 9

Prevent data quality issues in pull requests
2023 · metaplane.dev · its alternatives →
- 10
ExplainGithub▲184Turn hours of code reading into minutes of understanding
2025 · explaingithub.com · its alternatives →
- 11

Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com · its alternatives →
- 12

We needed something like --dangerously-skip-permissions that doesn’t nuke your untracked files, exfiltrate your keys, or install malware. Claude Code's permission system is allow-or-deny per tool, but that doesn’t really scale. Deleting some files is fine sometimes. And git checkout is sometimes not fine. Even when you curate permissions, 200 IQ Opus can find a way around it. Maintaining a deny list is a fool's errand. nah is a PreToolUse hook that classifies every tool call by what it actually does, using a deterministic classifier that runs in milliseconds. It maps commands to action types…
Mar 2026 · github.com · its alternatives →
- 13

- 14
Git Glance▲76Quickly get an overview of your GitHub pull requests
2021 · chromewebstore.google.com · its alternatives →
- 15

An extension of Refined GitHub browser plugin for AI contribution tracking capabilities in GitHub pull requests.
Feb 2026 · blog.rbby.dev · its alternatives →
- 16

- 17FV
2015 · feathub.com · its alternatives →
- 18

and the open source Codes of Conduct
2016 · gadgetsprimer.com · its alternatives →
- 19GA
2018 · jusx.github.io · its alternatives →
- 20

This is a tool for auditing github organizations including their repos, users, and teams. It is useful for compliance, security and auditing.
2022 · github.com · its alternatives →
- 21

Open sourced application to detect security vulnerabilities.
2020 · github.com · its alternatives →
- 22GM
2017 · gitmonkey.io · its alternatives →
- 23

2015 · github-file-watcher.com · its alternatives →
- 24

AntiVirus Monitor. Contribute to billziss-gh/avm development by creating an account on GitHub.
2020 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →