Top all-time · #12252
Arnica's Technical Blog
Company blog · arnica.io/blog · on HN as eranationsecurityprogramming
Arnica's Technical Blog is the company blog at arnica.io, writing about security and programming. Since 2022, 6 different Hacker News readers have linked it 38 times, most often “How do top open-source projects protect their code?”. It is still writing: the last post was on 2026-10-21, and you can follow it by feed.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
The one comment links a post on defending against source code exfiltration, posted as a side note in a thread about a source code leak. The comment does not judge the writing.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Arnica is an agentic application security platform that secures AI-generated code with SAST, SCA, IaC, secrets detection, agent governance, and automated remediation.
Most-linked posts?
- How do top open-source projects protect their code?3 people · 3 mentions · first linked 2022-02-09
- Show HN: Free secrets scanning for unlimited private GitHub repos2 people · 4 mentions · first linked 2022-05-12
- What Is Pippelineless Security?2 people · 2 mentions · first linked 2022-12-06
- GitGoat: Misconfigured GitHub Organization (Open Source)2 people · 2 mentions · first linked 2022-06-28
- AppSec vs. Software Supply-Chain Security2 people · 2 mentions · first linked 2022-02-28
- Local webhook development: A Guide to customizing smee.io for fun and profit2 people · 2 mentions · first linked 2023-04-19
What Hacker News says?
LastPass did very well! Here’s why: https://www.arnica.io/blog/a-first-look-at-lastpass-security...
Comment linking /blog/a-first-look-at-lastpass-security-incident-notification
on “LastPass: Notice of Security Incident”Submitted How to survive a state-actor trying to put a backdoor in your code? as a story · 20 points
HN discussionQuote: "Quote: "GitHub is available to developers in all countries, we are continuing to ensure free open source services are available to all, including developers in Russia". " My opinion: This is the right commercial decision for a company in this scale. We need to assume that most Russian developers don't want to harm the companies they work for, but any western company needs only one developer with malicious in…
Comment linking /
on “Our Response to the War in Ukraine”Submitted Show HN: Free secrets scanning for unlimited private GitHub repos as a story · 19 points
HN discussionOn the topic of source code exfil (unrelated to twitter) https://www.arnica.io/blog/defending-against-source-code-exf...
Comment linking /blog/defending-against-source-code-exfiltration-fast-and-slow
on “Twitter says source code was leaked on GitHub”Submitted How to Protect Yourself Against GitHub/OAuth Apps Supply Chain Attacks as a story · 9 points
HN discussionMitigation is premium. Detection should be free. https://www.arnica.io/blog/secret-detection-needs-to-be-free...
Comment linking /blog/secret-detection-needs-to-be-free-even-for-private-repositories
on “Secret scanning is now available for free on public repositories”Submitted GitGoat: Misconfigured GitHub Organization (Open Source) as a story · 8 points
HN discussionYou can assess all GitHub app permissions on https://arnica.io . The excessive permissions are presented at the end of the data ingestion process. This is part of the freemium.
Comment linking /
on “Tell HN: GitHub Apps bug created tokens with elevated privileges”Submitted How do top open-source projects protect their code? as a story · 7 points
HN discussionThis is great stuff! I read This adjacent research, which seems to complement yours - https://www.arnica.io/blog/how-do-top-open-source-projects-p...
Comment linking /blog/how-do-top-open-source-projects-protect-their-code
on “How does PR review wait time affect your open source project?”Submitted How to Protect Stale Source Code Repositories on GitHub as a story · 5 points
HN discussionSubmitted Supply Chain Breach: Tracing the Impact of a Clothing Retailer on Your Prod Env as a story · 5 points
HN discussionSubmitted Sourcegraph got hacked so we built a Sourcegraph token validator as a story · 3 points
HN discussionSubmitted Hardening software development environments 101 as a story · 3 points
HN discussionSubmitted What every developer should know about GitHub CODEOWNERS as a story · 3 points
HN discussionSubmitted Why we offer our advanced secret scanning for free, even for private repos as a story · 3 points
HN discussionSubmitted We offer our secret scanning service for free, even for private repos as a story · 3 points
HN discussionSubmitted AppSec vs. Software Supply-Chain Security as a story · 3 points
HN discussionSubmitted App SEC vs. Software Supply Chain Security Explained as a story · 3 points
HN discussionSubmitted Show HN: Semgrep Rule That Identifies GitHub Repo Confusion Attack IOCs as a story · 2 points
HN discussionSubmitted Local webhook development: A Guide to customizing smee.io for fun and profit as a story · 2 points
HN discussionSubmitted Have trouble keeping track of your keys? So does Toyota as a story · 2 points
HN discussionSubmitted NSA's software supply chain security recommendations need some refinement as a story · 2 points
HN discussionSubmitted Hacking Upstream: Finding a 0-Day in an OpenSSH Key Parser Library as a story · 2 points
HN discussionSubmitted Hacking Hacker News for fun and profit as a story · 2 points
HN discussionSubmitted How do top open source projects protect their code? as a story · 2 points
HN discussionSubmitted What Every Developer Needs to Know About GitHub Branch Protection as a story · 1 points
HN discussionSubmitted We Converted a GitHub Tool into a General Purpose Webhook Proxy as a story · 1 points
HN discussionSubmitted What Developers Can Learn from Taylor Swift's Re-Recording Strategy as a story · 1 points
HN discussion
