gitleaks / gitleaks

Scans git repos, files, and stdin for hardcoded secrets such as passwords, API keys, and tokens.

superdesigndev / treg

A registry and proxy that gives agents one base URL and token to call a catalog of third-party tool endpoints, billed per call.

openbao / openbao

Open-source, community-governed fork of HashiCorp Vault for storing, encrypting, and distributing secrets, certificates, and keys.

trufflesecurity / trufflehog

Scans repositories, filesystems, and chats for leaked credentials, then verifies whether each one is still live.