gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

go-gitea / gitea

Self-hosted all-in-one software development service offering Git hosting, code review, issue tracking, package registry, and CI/CD.

hashicorp / terraform

Terraform core: a CLI and graph engine for declaring, planning, and applying infrastructure changes from versioned configuration files.

openbao / openbao

Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

google / ax

Declarative Kubernetes-style orchestrator that runs sandboxed autonomous agent tasks on Agent Substrate, with workspaces and model specs.

github / gh-aw

Defines AI-powered GitHub Actions automation in Markdown with YAML frontmatter, compiled by the gh CLI extension into standard workflows.

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.

kubernetes / kubernetes

Open source system for deploying, scaling, and managing containerized applications across clusters of hosts.