Scratch
Find vulnerabilities in your code before hackers do
Scratch launched on January 6, 2026 with 6 votes, #2,272 of 14,584 launches that month and more than 75% of that year's launches.
What it does
Scan entire workspaces, fix merge conflicts automatically, squash noisy commits, and validate every file before it reaches main. Scratch combines Gemini-powered vulnerability detection with git automation so you ship secure code faster and with confidence, and reduce AI coding hallucinations with our MCP server.
Code security analysis and git tooling assistant.
Scan entire workspaces, fix merge conflicts automatically, squash noisy commits, and validate every file before it reaches main. Scratch combines Gemini-powered vulnerability detection with git automation so you ship secure code faster. Automatically resolve merge conflicts using AI-powered analysis. Scratch intelligently merges conflicting changes while preserving code quality and security. Automatically squash noisy commits into clean, meaningful commits. Keep your git history clean and professional with intelligent commit grouping. Automatically analyze files before they're staged. Catch security vulnerabilities and risky changes before they reach your repository. Uses Google Gemini AI…from scratch-security.vercel.app
Does a similar job
all alternatives →
Gemini Code HarvesterMar 2026 · getplugzz.com · ▲80Extract & download all Gemini AI code blocks in one click
ShadowGit2025 · shadowgit.com · ▲20Hey HN, I built ShadowGit a while back to automatically commit code every minute to a hidden git repo (.shadowgit.git). Original goal was to easily rollback when AI tools break things. But I discovered something interesting: this minute-by-minute history is perfect context for AI assistants. So I built an MCP server that lets Claude/Cursor query this history using native git commands. The results surprised me: Before: Claude would read my entire codebase repeatedly, burning 15,000+ tokens to debug issues. After: Claude runs `git log --grep="drag"` finds when drag-and-drop worked,…
I built a PR listener and ruleset to detect malicious code in CI/CD2025 · github.com · ▲13I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
CommitGate – Automatically scan your commit for vulnerabilitiesJun 2026 · github.com · ▲5Hello HN! I built a pre-commit code scanner that checks your staged changes for security vulnerabilities every time you run 'git commit'. I am an inexperienced programmer and this is my first personal project. Any feedback, positive or negative, big or small, relevant or not, would be greatly helpful and appreciated! The tool requires Gitleaks and Python to run, you will also need to use your own AI API key, which I understand is a big setup friction. You can check out my demo video instead if that is more convenient: https://youtu.be/ZYe5vWFRTus?si=9Fv8DhTHktwDK4mV Thank you…
More dev tools this month
the category →

open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com

Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 24d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 29d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, January 2026
the whole month →- IN
Hey HN! I wanted to share something I built over the last few weeks: isometric.nyc is a massive isometric pixel art map of NYC, built with nano banana and coding agents. I didn't write a single line of code. Of course no-code doesn't mean no-engineering. This project took a lot more manual labor than I'd hoped! I wrote a deep dive on the workflow and some thoughts about the future of AI coding and creativity: http://cannoneyed.com/projects/isometric-nyc
AI · Jan 2026 · cannoneyed.com




Automatic AI-powered code reviews the moment you open a PR
Dev tools · Jan 2026 · kilo.ai
