Releases·Tool Release
Developer releases Shrine, a pre-deploy CLI that scans codebases and databases for exposed secrets and broken Supabase RLS
A developer released a beta of Shrine, a CLI tool that scans codebases and databases for security exposures before production deployment. The tool catches leaked secrets, tests Supabase RLS with real anonymous requests, and flags misconfigurations; the developer is soliciting user feedback before a v1 release.
5 engagement1 sourceSun, Sep 27, 2026, 01:11 PM
AI Overview
- Shrine, a CLI tool in beta, scans codebases and databases for exposure before production, built after Reddit feedback favored pre-deploy over runtime checks
- Shrine catches leaked API keys (AWS, Stripe, OpenAI, Anthropic, GitHub) and secrets in old git commits, including deleted ones
- Shrine proves broken Supabase RLS by attempting real anonymous reads/writes, and flags public storage buckets and weak JWT setups
- Optional SQL injection testing asks for user confirmation before running; deep code-aware scanning is JS/TS only, one project at a time
Related
Products·launched
Shrine - CLI scanner for exposed secrets, leaked JWTs, and Supabase misconfigurations in repos
Shrine is a CLI tool that scans code repositories for security issues like exposed secrets, leaked JWTs, and Supabase misconfigurations. The developer validated it by running it on his own codebase, where it found real problems including a service-role key in a public HTML file and stale RLS policies on a Supabase backend. It targets developers who want to catch credential leaks and backend misconfigurations before they become exploitable.
Shrine is a CLI tool that scans code repositories for security issues like exposed secrets, leaked JWTs, and Supabase misconfigurations. The developer validated it by running it on his own codebase, where it found real problems including a service-role key in a public HTML file and stale RLS policies on a Supabase backend. It targets developers who want to catch credential leaks and backend misconfigurations before they become exploitable.
7 engagement2 sourcesredditTue, Sep 29, 2026, 11:57 AM
Products·launched
PreflightX: free scanner that checks live sites for leaked API keys and exposed secrets
PreflightX is a free web scanner that checks a live site's public HTML and JavaScript bundles for exposed secrets like API keys behind VITE_ or NEXT_PUBLIC_ variables. It was built by an electrician in Slovakia using Claude Code, prompted by posts about AI-built apps shipping secrets to the browser. It serves as a quick pre- or post-launch first check for developers, not a full security audit.
PreflightX is a free web scanner that checks a live site's public HTML and JavaScript bundles for exposed secrets like API keys behind VITE_ or NEXT_PUBLIC_ variables. It was built by an electrician in Slovakia using Claude Code, prompted by posts about AI-built apps shipping secrets to the browser. It serves as a quick pre- or post-launch first check for developers, not a full security audit.
1 engagement1 sourceredditMon, Oct 12, 2026, 08:12 PM
Products·launched
Free CLI scanner for common AI-code security mistakes
A free command-line tool that scans projects for known security mistakes common in AI-generated code, such as leaked API keys, exposed .env files, unprotected admin routes, and Supabase Row-Level Security gaps. It is built with Python 3 standard library only, requiring zero setup, and is aimed at developers shipping with Lovable, Bolt, or Cursor.
A free command-line tool that scans projects for known security mistakes common in AI-generated code, such as leaked API keys, exposed .env files, unprotected admin routes, and Supabase Row-Level Security gaps. It is built with Python 3 standard library only, requiring zero setup, and is aimed at developers shipping with Lovable, Bolt, or Cursor.
1 engagement1 sourceredditSat, Aug 22, 2026, 12:55 AM
Products·launched
SafePush — open-source security CLI that scans AI-built apps for exposed API keys and secrets
SafePush is a free, open-source CLI that checks apps built with AI coding tools like Cursor and Claude Code for common security mistakes. It detects exposed API key patterns, suspicious credential assignments, tracked .env files, and potentially sensitive data before code is published. It targets beginners who can now build full apps without security experience.
SafePush is a free, open-source CLI that checks apps built with AI coding tools like Cursor and Claude Code for common security mistakes. It detects exposed API key patterns, suspicious credential assignments, tracked .env files, and potentially sensitive data before code is published. It targets beginners who can now build full apps without security experience.
14 engagement2 sourcesredditTue, Oct 13, 2026, 02:45 PM
Products·launched
AgentSweep: CLI to scan AI coding agent histories for leaked secrets
AgentSweep is a CLI tool that scans the local history files of 31 AI coding agents (Claude Code, Cursor, Codex, etc.) for leaked secrets like API keys, tokens, and passwords. It uses 193 detection rules to identify credentials and provides revocation links for each provider, helping developers clean up sensitive data left in plaintext by LLM interactions.
AgentSweep is a CLI tool that scans the local history files of 31 AI coding agents (Claude Code, Cursor, Codex, etc.) for leaked secrets like API keys, tokens, and passwords. It uses 193 detection rules to identify credentials and provides revocation links for each provider, helping developers clean up sensitive data left in plaintext by LLM interactions.
5 engagement1 sourceredditFri, Jul 24, 2026, 06:35 AM