gitleaks / gitleaks
Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.
gitleaks / gitleaks
aquasecurity / trivy
Open-source scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM data in containers, filesystems, git repos, VM images, and Kubernetes.
openbao / openbao
Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.
trufflesecurity / trufflehog
Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.
betterleaks / betterleaks
Find leaked secrets everywhere.
getsops / sops
Simple and flexible tool for managing secrets
Infisical / agent-vault
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
mvanhorn / cli-printing-press
Every API has a secret identity. This finds it, absorbs every feature from every competing tool, then builds the GOAT CLI — designed for AI agents first, with SQLite sync, offline search, and compound insight commands.
bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
jhaals / yopass
Secure sharing of secrets, passwords and files
external-secrets / external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
zalando / go-keyring
Cross-platform keyring interface for Go
inoio / agents-sandbox
Sandbox for AI coding agents (Claude Code, opencode, pi): runs each project in an isolated microVM with host-side secret injection. Linux/KVM & macOS.
bank-vaults / bank-vaults
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
QuesmaOrg / quesma-shipper
Collects AI coding-agent sessions from developer machines, scrubs secrets, encrypts with age, and uploads to your organisation's storage.
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
hashicorp / vault-secrets-operator
The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.
algolia / sup3rS3cretMes5age
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
Shopify / ejson
EJSON is a small library to manage encrypted secrets using asymmetric encryption.
GoogleCloudPlatform / berglas
A tool for managing secrets on Google Cloud
pinterest / knox
Knox is a secret management service
Luzifer / ots
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
1Password / onepassword-operator
The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.
aws / secrets-store-csi-driver-provider-aws
The AWS provider for the Secrets Store CSI Driver allows you to fetch secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store, and mount them into Kubernetes pods.
solongate / agent-security
Local-first, open-source security gateway for AI coding agents. Enforce tool-call policies, detect secrets, and audit actions on-device.
DavidCarliez / cover
Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
goodtek-xyz / openllms
Self-hosted multi-account LLM gateway (OpenAI-compatible routes, SQLite, file secrets)
kubernetes-sigs / secrets-store-csi-driver
Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
kcsd-labs / devops-tools
Self-service Kubernetes portal: logs, metrics, restarts, secrets and Helm, scoped by role