Trestle

What it does

AI coding agents write code faster than humans can review it. Trestle is a local, code-aware secret scanner that protects the AI coding loop. It catches API keys, tokens, passwords, private keys, and certificates before they leak, across your CLI, pre-commit hooks, IDEs like VS Code and Cursor, and MCP-compatible assistants.

Trestle is a local secret scanner that finds API keys, tokens, passwords, and private keys in your code. It runs entirely on your machine, with no network calls and no telemetry.

Code your AI writes ends up in more places than you'd want. Scrapers pull it from public commits in almost real time, client bundles ship it to every visitor's browser, and today's commits train tomorrow's models. Trestle works alongside your AI assistant, scanning every file and every commit, so your secrets stay yours. I'll write the client and use trestle to verify it doesn't leak any secrets. Found a hardcoded API key. I'll move it to .env and reference it via process.env.API_KEY . Done. The key is now in .env (already gitignored). Set API_KEY on your deployment environments too. of basic web application attacks involve stolen credentials . median time to remediate a secret leaked to a…from trestlescan.com

• 
  GammacodeOct 2025 · ▲269

  Web and Terminal agents that scan, fix, and ship secure code

• 
  HoundDog.ai Static Code Scanner2024 · hounddog.ai · ▲245

  Catch PII leaks in code & keep your PII inventory current

• FL
  Free local security checks for AI coding in VSCode, Cursor and Windsurf2025 · ▲43

  Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…

• 
  Hide2025 · ▲27

  AI coding agent for end-to-end code delivery

• 
  HoundDog.ai – Ultra-Fast Code Scanner for Data PrivacyFeb 2026 · github.com · ▲16

  Hi HN, I'm one of the creators of HoundDog.ai (https://github.com/hounddogai/hounddog). We currently handle privacy scanning for Replit's 45M+ creators. We built HoundDog because privacy compliance is usually a choice between manual spreadsheets or reactive runtime scanning. While runtime tools are useful for monitoring, they only catch leaks after the code is live and the data has already moved. They can also miss code paths that aren't actively triggered in production. HoundDog traces sensitive data in code during development and helps catch risky flows (e.g., PII…

• 
  Sense, code intelligence for AI agentsJun 2026 · luuuc.github.io · ▲14

  Your AI has your code's text, never its map. Fix that.

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 16d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 18d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 20d ago · stillwet.art

• 
  Onepin▲384

  AI voiceover with every name, price and date said right

  AI · 30d ago · onepin.ai

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 28d ago · world.pixverse.video

• 
  Fundraisly▲1,537

  AI fundraising agent that finds investors and books meetings

  AI · Jun 2026 · fundraisly.com

• 
  Homebrew 6.0.0▲1,481

  Today, I’m proud to announce Homebrew 6.0.0. The most significant changes since 5.1.0 are a new tap trust security mechanism, the new faster, smaller, default internal Homebrew JSON API, sandboxing on Linux, better defaults informed by our user survey, many brew bundle improvements, improved performance and initial support for macOS 27 (Golden Gate). Happy to discuss any questions here!

  Dev tools · Jun 2026 · brew.sh

• 
  Performative-UI – A react component library of design tropes▲1,181

  Hi HN! I was super frustrated at apps like tiktok and wechat preventing me from saving or downloading the animated gifs, so I made a little tool to turn a screen recording into a slack-sized emoji. Hope you get some value from this!

  Life & fun · Jun 2026 · vorpus.github.io

• 
  Upstream▲976

  The inbox designed for humans and agents

  AI · Jun 2026 · upstream.do

• 
  Goldfish▲958

  Press Option. It knows your work and replies like you

  AI · Jun 2026 · goldfish.sh

• 
  I made Google Trends for Hacker News by indexing 18 years of comments▲822

  Search 18 years of Hacker News and chart how any topic, tool, or person trended. Overlay terms to compare their rise and fall across 45M posts and comments.

  Life & fun · Jun 2026 · hackernewstrends.com