👋 DevGuard Tools
Open-source GitHub Actions that catch risky deploys, leaked secrets, and bad migrations before they merge.
docker restart that took a service down for an hour, a .git/ folder leaked to a public host. These tools encode the lessons so you don't learn them the hard way.
Get started
Each tool is a zero-dependency Action. Add one to any repo:
- uses: ivosetyadi/deploy-guard@v1
See it in action
🛡️ Deploy Guard
Flagged a mass UPDATE without LIMIT and a DROP TABLE on a live PR.
🔑 Leak Guard
Caught an AWS key and an LLM key in a PR — values redacted in the comment.
See the real PR →📡 PR Risk Radar
Scored a demo PR 57/100 — High across SQL, dependency, and infra signals.
See the real PR →🏷️ Issue Triage
Labeled a new issue bug and flagged it as a possible-duplicate of #1.
The tools
Block PRs that carry dangerous deploy patterns — mass-DML migrations, unguarded restarts, leaked secrets.
Catch leaked secrets in a PR — API keys, private keys, committed .env files — before they merge. Every value redacted.
Generate human-readable release notes from commits. Works with or without an LLM key (BYOK, provider-agnostic).
Score every pull request 0–100 across risk dimensions — risky SQL, secrets, deps, infra, diff size — and comment a verdict.
A richer GitHub contribution card as an SVG — streaks, totals, busiest weekday. A scheduled Action commits it into your repo.
Auto-label new issues, flag likely duplicates, and assign the right people — stateless, with optional embeddings.
This site — the DevGuard Tools hub. Static, self-contained, served on GitHub Pages.