Proactive Security Monitoring for GitHub Actions Workflows
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
Proactive Security Monitoring for GitHub Actions Workflows launched on June 26, 2024 with 32 votes, #806 of 4,672 launches that month and more than 75% of that year's launches.
In plain words
Listen.dev is a security monitoring tool for GitHub Actions workflows designed to protect software releases from supply chain threats. Built by developers who experienced a crypto-jacking attack through malicious dependencies, it proactively identifies security risks in third-party code and container images. The tool targets engineering teams using GitHub Actions who need to secure their build pipelines and deployments against supply chain vulnerabilities.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In…
Does a similar job
all alternatives →
Keep – GitHub Actions for your monitoring tools2023 · github.com · ▲181Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
We built a developer-first open-source Zapier alternative2023 · trigger.dev · ▲745For the past few months we’ve been building Trigger.dev and can now share our beta with you: https://github.com/triggerdotdev/trigger.dev. Trigger.dev is an open source platform that makes it easy for developers to create event-driven background tasks directly in their code. You write workflows using our SDK, and can view all the runs in our web app. Why we built this: - We found current workflow / automation tools like Zapier and n8n are good for simple tasks, but not for more advanced use cases. - Dropping down into code in these tools is just not a great…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲340Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, June 2024
the whole month →
La Growth Machine▲1,216Create personalized, multi-channel conversations at scale
AI · 2024 · lagrowthmachine.com
PyjamaHR▲1,132Hiring on autopilot. The AI applicant tracking system (ATS).
Work · 2024 · pyjamahr.com