Dependency CI – Continuous testing for your dependencies

In plain words

Dependency CI is a code security analysis tool that scans over 40 programming languages for vulnerabilities, including those in open source dependencies and generated code. It provides static application security testing (SAST), software composition analysis (SCA), secrets detection, and infrastructure-as-code scanning integrated into developer workflows from IDE to CI/CD pipelines. The platform is designed for software development teams seeking to identify and remediate security issues during the development process.

written from the facts on this page · September 2026

From the sources

Secure your entire codebase—human-written, AI-generated, and open source. Seamlessly integrated into your developer workflow, SonarQube detects and provides fixes for vulnerabilities with fast, accurate, and precise automated code securityfrom dependencyci.com

• BO
  Bearer – Open-source code security scanning solution (SAST)2023 · ▲106

  Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…

• 
  Fossa-cli – Fast and reliable dependency analysis for any codebase2018 · github.com · ▲104

  Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems. - fossas/fossa-cli

• 
  Dastardly2022 · portswigger.net · ▲57

  A lightweight web app security scanner for your CI pipelines

• 
  SafeDep Vet2023 · safedep.io · ▲72

  GitLab CI Component that lets you seamlessly protect your pipelines from vulnerable and malicious open source dependencies. The component integrates directly into your CI/CD workflow through the GitLab CI Catalog and allows you to establish policy-driven guardrails using Common Expression Language (CEL). Key features: - Set your own opinionated security policies as code using CEL - Detect and block risky OSS components before they enter your codebase - Seamless integration as a native GitLab CI Component - Available directly in the GitLab CI Catalog Try and lets us know our thoughts!

• 
  DepWardenAug 2026 · depwarden.in · ▲1

  Free, anonymous dependency & code security scanning

• 
  Dependencies for macOS2021 · ▲82

  Explore the architecture of apps with an interactive graph

• 
  /dev/null▲481

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲341

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Web Design in 4 minutes▲1,624

  Learn the basics of web design in 4 minutes with this interactive tutorial.

  Life & fun · 2016 · jgthms.com

• 
  Buffer for Instagram▲640

  Plan, track, and analyze your Instagram marketing

  Growth · 2016 · buffer.com

• 
  Sans Francisco▲604

  A collection of tools and resources for designers

  Work · 2016

• 
  Nintendo Classic Mini▲593

  The NES is back... but it's mini!

  Life & fun · 2016 · nintendo.com

• 
  Highly for iOS▲573

  Medium-style highlighting in every app and website. 🖌

  Work · 2016

• 
  Drift 2.0▲569

  A scalable way to talk to your customers

  Growth · 2016 · drift.com