Free secrets scanning for unlimited private GitHub repos
My name is Nir! I am one of the three co-founders of arnica.io. I’ve worn many hats in cyber security over the years – sys admin, pen-tester, security architect, and Chief Information Security Officer (CISO). What really gets me excited about my work is making security easy and effective for developers and ops teams! In my last role, at one of the top 3 FinTechs, following the attack against Solarwinds, the CEO asked me what we are doing to secure our software supply chain. I met with 15+ vendors, did a few POCs, but unfortunately each solution either increased operational cost or was too…
Free secrets scanning for unlimited private GitHub repos launched on May 12, 2022 with 19 votes, #864 of 2,942 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 4 years on.
In plain words
Arnica provides secrets scanning for unlimited private GitHub repositories at no cost. The tool detects exposed credentials and sensitive information in code to help development and operations teams secure their software supply chain. It addresses the need for accessible, low-overhead security scanning that integrates directly into developers' existing workflows without adding significant operational burden or complexity.
written from the facts on this page · September 2026
From the sources
Explore why secret detection should always be free, even for private repositories, and how Arnica ensures secure coding practices at scale.
Secrets can grant access to data, impact production operations, access third party systems down the software supply chain , and introduce a reputational risk . They can be found in source code, production and CI/CD logs, Docker images, Slack channels, or even on a random shared file. Given how powerful secrets are, it is critical that developer security tools provide secret detection for free across public and private repos, regardless of how many developers are in the company. The good thing about git secrets scanning is that has become a commodity. Popular open-source initiatives, such as GitLeaks , Git-Secrets and Detect-Secrets , have become embedded in the development lifecycle as a…from arnica.io
In the maker’s words, at launch
My name is Nir! I am one of the three co-founders of arnica.io. I’ve worn many hats in cyber security over the years – sys admin, pen-tester, security architect, and Chief Information Security Officer (CISO). What really gets me excited about my work is making security easy and effective for developers and ops teams!…
Does a similar job
all alternatives →
- IBI built a tool that helps people scan and clean any repo for secrets2024 · securelog.com · ▲20
I started a repo for sharing algorithm implementations2013 · github.com · ▲52Everything that would be here is in the README. I hope this gets big, it has tons of potential.
Open-source certificate from GitHub activityJan 2026 · certificate.brendonmatos.com · ▲43I built this as a small side project to learn and experiment, and I ended up with this! I used a subdomain from my personal portfolio, and everything else runs on free tiers. The project uses Nuxt, SVG, Cloudflare Workers, D1 (SQL), KV, Terraform, and some agentic coding with OpenAI Codex and Claude Code. What started as a joke among friends turned into a fun excuse to build something end to end, from zero to production, and to explore a few things I’d never touched before. I’d really appreciate any feedback or suggestions.
- PSProactive Security Monitoring for GitHub Actions Workflows2024 · ▲32
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 29d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, May 2022
the whole month →
Peerlist▲1,049A professional network w/ robust work profiles at its core
Life & fun · 2022 · peerlist.io
Switchboard▲768Hey HN this is Daniel, I'm excited to share Airtop with the community! Airtop enables AI agents to seamlessly browse and automate any website — even ones with complex authentication like MFA or OAuth. Whether you need to scrape, interact with dynamic content, or automate tasks across multiple browsers, Airtop's cloud-based infrastructure makes it scalable and accessible. Why Airtop? — AI-Driven Web Automation: Automate interactions with any site through natural language commands even if they include human-in-the-loop scenarios. — Authentication Ready: Airtop handles websites requiring…
Work · 2022 · airtop.ai
Automagically reverse-engineer REST APIs via capturing traffic - alufers/mitmproxy2swagger
Growth · 2022 · github.com
