HN Showcase
Back to browse
GitHub Repository

Forensic structural audit of kubernetes/kubernetes using The Janitor v7.9.4. Includes CBOM, VEX, and TEI actuarial ledger.

1 stars

We audited 914 K8s PRs for AI slop with a zero-upload AST firewall

by GhrammR·Mar 25, 2026·1 point·0 comments
Visit ProjectView on HN

AI Analysis

●MidBold Bet

Audit report without the actual tool repo — methodology is interesting, but where's The Janitor?

Strengths
  • •Tree-sitter AST queries for 20+ security patterns across 12 languages is legitimate technique
  • •MinHash LSH clone detection for coordinated injection attacks is clever structural analysis
Weaknesses
  • •No link to The Janitor tool itself — just a report, no installable software to evaluate
  • •Made-up metrics like '$2020 economic impact' and 'vibe-coded PRs' undermine credibility
Category
Security
Target Audience

Kubernetes maintainers, security engineers, DevOps teams

Similar To

Semgrep · CodeQL · Snyk Code

Similar Projects

Developer Tools●●Solid

Open Slop – A GitHub Action to Triage AI-Generated PR Slop

Instead of chasing unreliable "AI fingerprint" heuristics, this action flags PRs using three blunt but practical signals — Velocity (how fast complex changes appear), Shotgun (many unrelated PRs from the same account), and Ghost (account age). It’s a small, sensible tool you can drop into a repo (bundled dist, single triage comment) that will immediately reduce the noise; just watch for false positives around rapid expert contributors and consider tuning thresholds.

Big BrainShip It
__alberto
333mo ago
Security●●●Banger

Aegis – Open-source pre-execution firewall for AI agents

Interceptor layer blocks SQL injection and shell injection before agents execute them.

Big BrainZero to OneSolve My Problem
AEGIS_JB
203mo ago