Kekkai – Interactive security triage in the terminal
Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…
What it does
In the maker’s words, at launch
Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive terminal UI to review findings, mark false positives, and save decisions locally. You can try it out: ``` pipx install kekkai-cli kekkai scan kekkai triage ``` What it currently does: - Runs Trivy (dependencies), Semgrep (code), and Gitleaks (secrets) - Normalizes findings into a unified report - Provides a keyboard-driven TUI for reviewing and marking findings - Supports .kekkaiignore for false positives - Has a CI mode with severity-based failure thresholds Design choices: - Local-first by default (no SaaS required) - No proprietary scanning logic, it sits on top of existing tools - Scanners run in read-only, no-network Docker containers This is still early and aimed at individual developers and small teams. The next things I’m working on are persistent triage state across runs (baselines) and better PR-level workflows. Repo and docs: https://github.com/kademoslabs/kekkai I’m around to answer questions about tradeoffs, limitations, or why this exists at all.
Does the same job
all alternatives →
- KOK8sAI – open-source GPT CLI tool for Kubernetes2024 · github.com · ▲9
Hey HN! I wanted to share an open-source project I’ve been working on called k8sAI. It’s a personal AI Kubernetes expert that can answer questions about your cluster, suggests commands, and even executes relevant kubectl commands to help diagnose and suggest fixes to your cluster, all in the CLI! As a relative newcomer to k8s, this tool has really streamlined my workflow. I can ask questions about my cluster, k8sAI will run kubectl commands to gather info, and then answer those question. It’s also found several issues in my cluster for me - all I’ve had to do is point it in the right…
- TFTriage.flow – Chat with Any GitHub Repo Using Faiss and LlamaIndex2025 · github.com · ▲5
A few weeks ago I got rejected from a role and the feedback was that I needed a deeper understanding of FAISS and LlamaIndex. So I built triage.flow — an AI assistant that lets you explore and understand GitHub repositories through a chat interface. It clones a repo, indexes it using FAISS + BM25 + tree-sitter parsing, and powers a full UI where you can: - Ask natural-language questions like “how does auth work?” or “explain @src/components/Modal.tsx” - Mention specific files/folders with @filename.ts (autocomplete supported) - See how the agent thinks in real time (Thought →…
- ASA simple script to check everything in your cloud2023 · github.com · ▲9
Hello, I'm Patrick SZYMOWIAK and I'm happy to introduce you to Kexa, a script that will optimize your operations, easily ensure compliance and save you money through your cloud providers. I've worked in cloud solutions with Azure for 8 years and came up with a few projects by now, and today I introduce you the new solution made by us for your cloud environments. The goal : Kexa is an open-source and portable software built to simplify and enhance the cloud verification process. It's designed to support various cloud providers. It operates on a set of user-defined rules, ensuring checks and…
- WRWe're building a search engine for GCP2022 · listvms.com · ▲9
Hi HN, I previously wore SWE/SRE hats on GCP. Later, I was on the other side, managing thousands of machines. The friction points of onboarding and operating cloud systems are personal problems to me. I’ve found it hard to keep track of all the random cloud resources floating around, especially as my team’s assets proliferated. Occasionally, there is a resource affecting an outage but no one remembers where it is. I am constantly frustrated by existing tooling. APIs can work, after you’ve navigated the byzantine documentation, but I often find myself doing ad-hoc tasks which are best…
- IMI made a simple but powerful deployment tool2024 · deploywithjig.askh.at · ▲5
Been using it for about a year now in production, but rewrote it completely in golang. My first go project so far. I wanted to have something that would make my life easier. A lot of tools nowaday kinda push you towards functional deployments and that usually doesn't work for me since I like stuff like LiveView by Phoenix and Websocket stuff in general. Old vercel deployments back when they allowed to deploy docker containers was a godsend, but since they don't offer that anymore I had to use services like fly.io(which is amazing) or heroku. However I wanted something selfhosted that I could…
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
