gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

kubernetes / kubernetes

Open source system for deploying, scaling, and managing containerized applications across clusters of hosts.

aquasecurity / trivy

Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.

hashicorp / terraform

Terraform core: a CLI and graph engine for declaring, planning, and applying infrastructure changes from versioned configuration files.

go-gitea / gitea

Self-hosted all-in-one software development service offering Git hosting, code review, issue tracking, package registry, and CI/CD.

openbao / openbao

Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

google / ax

Declarative Kubernetes-style orchestrator that runs sandboxed autonomous agent tasks on Agent Substrate, with workspaces and model specs.

PatchMon / PatchMon

Web platform for monitoring, patching and compliance-scanning Linux server fleets via outbound-only agents.

github / gh-aw

Defines AI-powered GitHub Actions automation in Markdown with YAML frontmatter, compiled by the gh CLI extension into standard workflows.

helm / helm

Helm is a package manager that installs and manages Kubernetes applications as versioned, templated packages called Charts.

oauth2-proxy / oauth2-proxy

Reverse proxy that adds OAuth2 and OIDC authentication in front of web applications, supporting many identity providers.

grafana / alloy

OpenTelemetry Collector distribution that runs programmable, expression-based pipelines for metrics, logs, traces, and profiles.