Alternatives
Products that do what SmokedMeat, like Metasploit, but for CI/CD (open-source) does
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
- 1
- 2
- 3
- 4
- 5
- 6PV
Hey HN, My name is Jack Naglieri. I’m the founder of Panther Labs - an SF-based cybersecurity startup. Prior to Panther, I was an engineering manager at Airbnb. Before that a security engineer/analyst/forensic analyst. Today, I’m excited to announce Panther v1.0, an open source, cloud-native SIEM: http://github.com/panther-labs/panther Teams can use Panther as an alternative to traditional SIEMs like Splunk. Panther is the culmination of our team’s experience building security tools at scale, including StreamAlert at Airbnb and critical internal monitoring…
2020
- 7
- 8
- 9
- 10DO
I kept seeing every npm/pnpm/yarn/bun/uv supply chain post end with the same advice (set a minimum release age, turn off install scripts), and while I know cooldowns are "controversial", they do work. But even if you convince people that they should set cooldowns, it seems many don't end up following through, not sure why, maybe because it means hand-editing five config files in five formats with five different time units, or perhaps the "it won't happen to me" syndrome (or "I'll do it later, it seems complicated" where it's actually very simple). So I created a tool that…
Jun 2026 · github.com
- 11
- 12
- 13
- 14
- 15
Deploy faster with ready-to-use CI/CD pipelines (No K8s)
Mar 2026
- 16CE
We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…
Mar 2026 · github.com
- 17
- 18TA
Jul 2026 · github.com
- 19CT
Jun 2026 · github.com
- 20
- 21EL
When someone here told me to focus on something more useful than reinventing the wheel. So. EnvCloak, a lightweight and simple tool for securely managing sensitive environment files. The design focuses on simplicity - just a few intuitive commands using the Click Python library. I assume seamless integration with CI/CD workflows. The aim is to provide a streamlined solution without the need for clunky tools. If you're tired of complex configurations or bloated alternatives, this might be worth a look! I would appreciate any feedback, feature ideas or input on how to improve this…
2024 · github.com
- 22CC
We're two engineers that got fed up with context switching. Why do we need to do a git push, open a browser tab, wait for some task to actually start, bite nails (or read HackerNews) for 10 minutes or more while dependencies are being installed for the 100th time and finally end up with an invalid YAML error. And for some reason this usually happens in the final stage of the pipeline leading up to the inevitable git commits "Fixed", "Fixed again", "Test", "Really fixed this time". We can do better. We set out to build Zippy. A CI/CD system that works from your terminal. No context…
Mar 2026 · zippy.sh
- 23FC
Hi HN! I'm Jean-Paul, the creator of Fire CI (https://fire.ci). I've been a dev for 10 years and building Fire CI for the past 6 months. Fire CI is a server that runs local builds in Docker on your own computer. It uses an installable agent to broker the builds with GitHub and also co-ordinates builds between your local server and other members of your team (optional). It's fast because there is no queueing and a tiny piece of your computer is more powerful than most hosted or rented cloud servers. It's scalable by design: each developer brings his own computing power. And IMHO the…
2019
- 24OL
Hello Hacker News, I often hear people saying "all build-systems suck", an opinion I have been sharing for years, and this is the motivation for this project. I finally got the opportunity to make it open-source, and here it is. In a few words, it is like make, except it can be comfortably used even in big projects using HPC (with millions of jobs, thousands of them running in parallel). The major differences are that: - dependencies are automatically tracked (no need to call gcc -M and the like, no need to be tailored to any specific tool, it just works) by spying disk activity - it is…
2025 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →