Layerleak – Like Trufflehog, but for Docker Hub

In plain words

Layerleak is a security scanning tool designed for developers who publish images to Docker Hub. It works similarly to Trufflehog by detecting secrets and sensitive information that may be accidentally included in container layers. The tool helps prevent credential leaks and other security vulnerabilities in Docker images before they are deployed, making it useful for teams managing containerized applications.

written from the facts on this page · September 2026

• IB
  I built ContainerCVE – a web tool to scan public Docker images2023 · containercve.com · ▲91

  I found it odd there wasn’t a simple web tool to scan Docker Hub images for vulnerabilities. So I built one. It’s powered by the popular open-source tool Trivy.

• 
  Subtrace – Wireshark for Docker Containers2025 · github.com · ▲369

  Hey HN, we built Subtrace (https://subtrace.dev) to let you see all incoming and outgoing requests in your backend server—like Wireshark, but for Docker containers. It comes with a Chrome DevTools-like interface. Check out this video: https://www.youtube.com/watch?v=OsGa6ZwVxdA, and see our docs for examples: https://docs.subtrace.dev. Subtrace lets you see every request with full payload, headers, status code, and latency details. Tools like Sentry and OpenTelemetry often leave out these crucial details, making prod debugging slow and annoying. Most of the…

• 
  KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

  I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

• LS
  Lynk – Securely expose local TCP and HTTP services to the web2020 · lynk.sh · ▲127
• 
  layerMar 2026 · crates.io · ▲88

  I built a small CLI called layer. It manages .git/info/exclude so you can keep local-only files in a repo without adding them to the shared .gitignore. This came from a normal team repo problem. People keep their own local files in a repo: API_SPEC.md, BACKEND_GUIDE.md, ARCHITECTURE_NOTES.md, CLAUDE.md, prompt files, scratch notes, temporary investigation docs, and other markdown files with custom names that are useful for one developer but should not be committed. The usual answer is “just put it in .gitignore”, but that gets messy fast because these files are different for each…

• 
  Layerform – Open-source development environments using Terraform files2023 · github.com · ▲124

  Hi HN, we're Lucas and Lucas, the authors of Layerform (https://github.com/ergomake/layerform). Layerform is an open-source tool for setting up development environments using plain .tf files. We allow each engineer to create their own "staging" environment and reuse infrastructure. Whenever engineers run layerform spawn, we use plain .tf files to give them their own "staging" environment that looks just like production. Many teams have a single (or too few) staging environments, which developers have to queue to use. This is particularly a problem when a system is large,…

• 
  /dev/null▲486

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Lightfield▲901

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲728

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲716

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲709

  Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲702

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲659

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com