SafeDep Vet

In plain words

SafeDep Vet is a GitLab CI component that scans open source dependencies for vulnerabilities and malicious packages within your pipeline. It integrates directly into GitLab CI workflows and lets teams define custom security policies using Common Expression Language to block risky components before they enter codebases. The tool is designed for engineering and security teams managing open source supply chain risks across development machines, CI/CD pipelines, and production environments.

written from the facts on this page · October 2026

From the sources

SafeDep vet is a tool for identifying risks in open source software supply chain. It helps engineering and security teams to identify potential issues in their open source dependencies and evaluate them against organizational policies.

SafeDep helps teams detect malicious packages, protect AI agents, and govern open source risk across developer machines, CI/CD pipelines, and production workflows.

Scan and govern your dependencies across every PR and build. Block malicious packages at install-time, before they enter your codebase. Generate AI-enriched BOMs using real code evidence, not just manifests. Monitor every AI coding agent action across your projects and workflows. Attackers don't target your code. They target what you install: packages, MCP servers, IDE and agent extensions. SafeDep blocks malicious packages at every entry point, before they run. SafeDep analyzes every package published to the major registries, around the clock. Our research team publishes the breakdown, often before the ecosystem has an advisory. Third-party code arrives at every hand-off in your pipeline,…from safedep.io

• 
  Github competitor with free private repo2012 · gitlab.io · ▲61

  The intelligent orchestration platform for DevSecOps, enabling teams and agents to ship trusted software at enterprise scale.

• 
  Dependency CI – Continuous testing for your dependencies2016 · dependencyci.com · ▲198

  SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

• 
  Vet – A tool for safely running remote shell scripts2025 · getvet.sh · ▲89

  vet — A safer way to run remote scripts.

• 
  gpt-oss-safeguardOct 2025 · openai.com · ▲119

  Open safety reasoning models with custom safety policies

• 
  A Claude Code plugin that catch destructive Git and filesystem commandsDec 2025 · github.com · ▲61

  A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, Grok Build, Hermes Agent, Kimi Code

• 
  GitlabRunner2020 · ▲88

  Speed up your CI/CD pipeline

Questions this answers

• safedevtools

• 
  Run full iOS 16.5 firmware on Android Devices▲515

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 1d ago · github.com

• 
  /dev/null▲492

  a social network for devs

  Dev tools · 5d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 25d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  GPT-4▲1,160

  More accurate, less cringe, smoother & useful daily chats!

  AI · 2023 · openai.com

• 
  Collato▲972

  One AI search to find anything instantly, across all apps

  AI · 2023

• 
  Typing Mind▲826

  Chat with AI using your API keys. Pay only for what you use. ChatGPT, Gemini, Claude, and other LLMs supported. The best chat LLM frontend UI for all AI models.

  AI · 2023 · typingmind.com

• 
  Arc for iOS▲825

  Meet the internet again

  Work · 2023 · apps.apple.com

• 
  Sequoia▲726

  Personalized men's sexual health with on-demand experts

  Life & fun · 2023 · sequoia.health

• BI
  BBC “In Our Time”, categorised by Dewey Decimal, heavy lifting by GPT▲688

  I'm a big fan of the BBC podcast In Our Time -- and (like most people) I've been playing with the OpenAI APIs. In Our Time has almost 1,000 episodes on everything from Cleopatra to the evolution of teeth to plasma physics, all still available, so it's my starting point to learn about most topics. But it's not well organised. So here are the episodes sorted by library code. It's fun to explore. Web scraping is usually pretty tedious, but I found that I could send the minimised HTML to GPT-3 and get (almost) perfect JSON back: the prompt includes the Typescript definition. At the same time I…

  AI · 2023 · genmon.github.io