Repository Index

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

• security
• security-tools
• docker
• containers

Find secrets with Gitleaks 🔑

• security
• security-tools
• git
• golang

Find, verify, and analyze leaked credentials

• secret
• trufflehog
• credentials
• security

Simple and flexible tool for managing secrets

• security
• secret-distribution
• devops
• aws

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

• cli
• devops
• freebsd
• golang

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

• kubernetes
• security
• nsa
• mitre-attack

A Kubernetes controller and tool for one-way encrypted Secrets

• kubernetes
• kubernetes-secrets
• devops-workflow
• encrypt-secrets

Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.

• steampipe
• postgresql
• postgresql-fdw
• cloud

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

• scanning-tool
• secret-keys
• secrets-management
• infosectools

Protect against malicious open source packages 🤖

• devsecops
• security
• supply-chain-security
• policy-as-code

KSOPS - A Flexible Kustomize Plugin for SOPS Encrypted Resources

Easy, painless AWS credentials on developer laptops.

Discover internet-wide misconfigurations while drinking coffee

• cybersecurity
• scanner
• golang
• osint

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

• devsecops
• entropy
• gdpr
• golang

preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.

• devops
• devsecops
• security
• golang

Kustomize generator plugin that generates Secrets from sops-encrypted files

Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.

• aho-corasick
• cybersecurity
• devops
• git-hook

A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.

• cli
• developer-tools
• devops
• dotenv

Static analysis from configs → Kubernetes NetworkPolicies in seconds

• cloud-native
• devsecops
• golang
• helm