Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Repository Index
57,637 visible repositories in the index
1–24 of 29 · Most stars
A tool for secrets management, encryption as a service, and privileged access management
- vault
- go
- secrets
Find secrets with Gitleaks 🔑
- security
- security-tools
- git
- golang
Find, verify, and analyze leaked credentials
- secret
- trufflehog
- credentials
- security
Simple and flexible tool for managing secrets
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
- kubernetes
- openshift
- configmap
- secrets
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
- external-secrets
- kubernetes
- kubernetes-secrets
- secrets-manager
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
Find leaked secrets everywhere.
- cicd
- credentials
- developer-tools
- devops
CLI for managing secrets
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
Decrypt IPA's on MacOS
One-Time-Secret sharing platform with a symmetric 256bit AES encryption in the browser
- one-time-secret
- golang
- encryption
- aes256
Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend
Pure Go implementation of the NaCL set of API's
- golang
- nacl
- security
- secretbox
A clean room recreation of Auth0 with 1:1 drop in replacement feature parity.
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
Kustomize generator plugin that generates Secrets from sops-encrypted files
Integrates Spiffe and Vault to have secretless authentication
- spire
- spiffe
- vault
- hashicorp
A probably paranoid Golang utility library for securely hashing and encrypting passwords based on the Dropbox method. This implementation uses Blake2b, Scrypt and XSalsa20-Poly1305 (via NaCl SecretBox) to create secure password hashes that are also encrypted using a master passphrase.
- golang
- golang-library
- scrypt
- password-hash
Prevent your secrets from leaking into logs, std* etc.
- go
- secrets