Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
47,133 repositories indexed
1–24 of 60 · Most stars
A tool for secrets management, encryption as a service, and privileged access management
Find secrets with Gitleaks 🔑
Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.
Find, verify, and analyze leaked credentials
Simple and flexible tool for managing secrets
Loads environment variables from .env for nodejs projects.
Prevents you from committing secrets and credentials into git repositories
Community guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
A Kubernetes controller and tool for one-way encrypted Secrets
A command line tool that recreates the famous data decryption effect seen in the 1992 movie Sneakers.
Scanning APK file for URIs, endpoints & secrets.
A large library of free and open-source shaders for the Godot game engine. Here, you'll get 2D and 3D shaders with playable demos.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Cloud native secrets management for developers - never leave your command line for secrets.
Secure sharing of secrets, passwords and files
Keep passwords and other sensitive information out of your chat logs and inboxes.
CLI for managing secrets
A helm plugin that help manage secrets with Git workflow and store them anywhere
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
Program to reverse Docker images into Dockerfiles
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.