poutine

Supply chain vulnerability scanner that detects misconfigurations in GitHub Actions and GitLab CI/CD pipelines.

Desktopfreeglobal

A desktop app that parses GitHub Actions and GitLab CI workflow files to find misconfigurations and vulnerabilities in build pipelines, using a read-access token to analyze an organization's repositories. Built for security teams and DevSecOps engineers to automate checks that are impractical to perform manually, it can be run self-hosted and is open-source under the Apache 2.0 license from BoostSecurity.io.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of poutine - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim poutine to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether poutine (or something else) actually fits.

Try a problem