Mic52M

Mic52M/kelp

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

0 stars 0 forks 0 watchers TypeScript MIT License

devsecops github-action monorepo nextjs sast scanner secrets-detection security security-tools supabase typescript vibe-coding

View on GitHub Website

12 Open Issues Need Help Last updated: Aug 31, 2026

Open Issues Need Help

View All on GitHub

Community: add all-contributors and credit external PR authors on the README 5 days ago

documentation help wanted community

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Analytics: fire the finding.chat_turn event (currently a TODO) 5 days ago

good first issue web

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

CLI: honor NO_COLOR consistently and add a --no-color flag 5 days ago

good first issue cli

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Detection: Stripe webhook signing secret (whsec_) rule 5 days ago

good first issue detection

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Landing: add 'How it works' section with the architecture diagram 5 days ago

enhancement help wanted design landing

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Design: proper logo mark, favicon, and social preview image 5 days ago

help wanted design web

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

CLI walker: check SKIP_DIRS before running .gitignore matching 12 days ago

enhancement good first issue cli

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

CLI walker: dotfile skip runs before .gitignore, so !.something negations do not re-include 12 days ago

bug good first issue cli

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Add secret pattern for Anthropic API keys (sk-ant-…) 16 days ago

enhancement good first issue detection

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Add secret pattern for OpenAI project keys (sk-proj-…) 16 days ago

enhancement good first issue detection

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

CLI: honor .gitignore when walking the target directory 16 days ago

enhancement good first issue cli

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding

Docs: record a short GIF of `kelp scan` in action for the README 22 days ago

good first issue docs

0

Security scanner for vibe-coded apps — finds hardcoded secrets, permissive Supabase RLS, unauthenticated edge functions, and more. CLI, GitHub Action, and hosted app at kelp.build.

TypeScript

#devsecops#github-action#monorepo#nextjs#sast#scanner#secrets-detection#security#security-tools#supabase#typescript#vibe-coding