trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.

tbphp / gpt-load

Self-hosted AI gateway for multi-channel, multi-credential setups — API keys and subscription accounts, scheduling, failover, request logs and usage. 自托管 AI 网关：多渠道多凭据统一接入，含密钥与订阅账号、调度容错、日志与用量。

betterleaks / betterleaks

Find leaked secrets everywhere.

Infisical / agent-vault

A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.

praetorian-inc / titus

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

stephrobert / feint

A local emulator of the Scaleway, Outscale and Exoscale APIs. Their own official CLIs drive it end to end, Terraform and OpenTofu drive two of the three — no cloud account, no cloud credentials, nothing billed.

awslabs / amazon-ecr-credential-helper

Automatically gets credentials for Amazon ECR on docker push/docker pull

x90skysn3k / brutespray

Fast, multi-protocol credential brute-forcer. Parses Nmap, Nessus, and Nexpose output to automatically test default and custom credentials across 30+ protocols.

kubernetes-sigs / aws-iam-authenticator

A tool to use AWS IAM credentials to authenticate to a Kubernetes cluster

docker / docker-credential-helpers

Programs to keep Docker login credentials safe by storing in platform keystores

AdRoll / hologram

Easy, painless AWS credentials on developer laptops.

synfinatic / aws-sso-cli

A powerful tool for using AWS Identity Center for the CLI and web console.

Azure / kubelogin

A Kubernetes credential (exec) plugin implementing azure authentication

nateships / rolle

Assume any role, any cloud. Short-lived AWS, Azure, and Google Cloud credentials for your tools.