gitleaks / gitleaks
Find secrets with Gitleaks 🔑
gitleaks / gitleaks
heyderekj / slinky
Slinky keeps secrets out of files. A native Mac app for API keys, .env variables and recovery codes.
Palladiymateria / sharecheck
Local CLI that checks your project for accidental secrets, sensitive files, and oversized assets before publishing to GitHub. No uploads. No runtime dependencies.
aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
hashicorp / vault
A tool for secrets management, encryption as a service, and privileged access management
Infisical / infisical
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
getsops / sops
Simple and flexible tool for managing secrets
motdotla / dotenv
Loads environment variables from .env for nodejs projects.
drduh / YubiKey-Guide
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
openbao / openbao
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
external-secrets / external-secrets
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
superdesigndev / treg
OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn
dotenvx / dotenvx
a secure dotenv—from the creator of `dotenv`
dmno-dev / varlock
AI-safe .env files: Schemas for agents, Secrets for humans.
edoardottt / cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
jhaals / yopass
Secure sharing of secrets, passwords and files
onetimesecret / onetimesecret
Keep passwords and other sensitive information out of your chat logs and inboxes.
ryantm / agenix
age-encrypted secrets for NixOS and Home manager
Infisical / agent-vault
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
betterleaks / betterleaks
Find leaked secrets everywhere.
bank-vaults / bank-vaults
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
jkroepke / helm-secrets
A helm plugin that help manage secrets with Git workflow and store them anywhere
GitGuardian / ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
stacksimplify / aws-eks-kubernetes-masterclass
AWS EKS Kubernetes - Masterclass | DevOps, Microservices
emberstack / kubernetes-reflector
Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.
scito / extract_otp_secrets
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
cachix / secretspec
A declarative interface for every secret provider.
kubernetes-sigs / secrets-store-csi-driver
Secrets Store CSI driver for Kubernetes secrets - Integrates secrets stores with Kubernetes via a CSI volume.
drduh / pwd.sh
Manage secrets with Bash and GnuPG symmetric encryption
Shopify / ejson
EJSON is a small library to manage encrypted secrets using asymmetric encryption.
OWASP / wrongsecrets
Vulnerable app with examples showing how to not use secrets
mongodb / kingfisher
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
pypa / gh-action-pypi-publish
The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
dotenvx / dotenv-expand
Expand variables already on your machine for use in your .env file.
meld-cp / obsidian-encrypt
Hide secrets in your Obsidian.md vault
hashgraph-online / hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
fwdai / rowel
🔑 Local-first Secrets Manager
phasehq / console
Secrets management for teams and AI agents.
MaxHu-xuan / chat-archive-guard
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
asamassekou10 / ship-safe
The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.
dotenvx / react-native-dotenv
Load .env into React Native - with support for multiple .env files.
duriantaco / skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
blacklanternsecurity / badsecrets
A library for detecting known secrets across many web frameworks
risa-labs-inc / BossConsole
Open-source, multi-platform harness for AI agents - a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 200+ MCP tools. Built for enterprises, science & research.
sgasser / pasteguard
AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.
praetorian-inc / titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
aws / aws-workload-credentials-provider
The AWS Workload Credentials Provider (formerly the AWS Secrets Manager Agent) is a client-side solution that helps you standardize how you consume credentials from AWS services across your compute environments.
gitleaks / gitleaks-action
Protect your secrets using Gitleaks-Action
Aletheore / Aletheore
Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.
1Password / onepassword-operator
The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.
drduh / Purse
Manage secrets with Bash and GnuPG asymmetric encryption (YubiKey)
matiaskorhonen / paper-age
Easy and secure paper backups of secrets
hashicorp / vault-secrets-operator
The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.
aws / secrets-store-csi-driver-provider-aws
The AWS provider for the Secrets Store CSI Driver allows you to fetch secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store, and mount them into Kubernetes pods.
automic-vault / automic-vault
CLI security is broken. The packaging layer is where we fix it.
algolia / sup3rS3cretMes5age
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
nodevault / node-vault
Client for HashiCorp's Vault