Launched this week
GiTRay
Scan a GitHub repo for malware before you clone it
2 followers
Scan a GitHub repo for malware before you clone it
2 followers
GiTRay scans any public GitHub repo for malware, credential stealers, malicious dependencies and scam tricks — straight from its URL, without cloning or running a single line of code. You get a plain Clean / Suspicious / Dangerous verdict with the exact lines behind it. Free.
Free
Launch Team
AWS Activate CreditsCredits that fuel your startup’s next milestone
Promoted
Hey Product Hunt 👋
I'm Doruk, the maker of GiTRay.
Every developer has had this moment: you find a promising repo, you're about to `git clone` it… and a small voice asks, "wait — is this safe?" The scary part isn't cloning; it's what runs afterward — install scripts, hidden payloads, a malicious dependency, a credential stealer.
GiTRay answers that question before you take the risk. Paste a public GitHub URL and it reads the repo in memory — it never clones, installs, or runs anything — then gives you a plain verdict (Clean / Suspicious / Dangerous) with the exact files and lines behind each finding.
Under the hood it checks:
• Code set to run automatically (install hooks, editor/dev-container files)
• Credential & data theft, via data-flow analysis
• Hidden / obfuscated payloads
• Malicious dependencies (OSV / OpenSSF)
• Committed binaries, by hash, against VirusTotal (nothing is ever uploaded)
It's free, needs no sign-up, and works in English and Turkish. Results are explainable heuristics, not a guarantee — for anything you'll run with secrets, read the code too.
Try it on any repo and tell me what you'd want next — I'm here all day for feedback 🙏
👉 https://gitray.net