Simple and flexible tool for managing secrets
Repository Index
47,133 repositories indexed
1–19 of 19 · Most stars
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
A collection of postmortem templates
- site-reliability-engineering
- site-reliability
- devops
- postmortem
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Hide secrets like API keys, passwords and tokens in Neovim while screen sharing or streaming. Masks .env, JSON, YAML, TOML, XML, .http, Terraform/HCL and Dockerfiles with extmarks, without changing the file. Presentation mode, screen shield, picker and terminal masking.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
Lightweight Docker monitoring dashboard with anomaly detection & Telegram alerts. One-liner install, zero config.
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
- cybersecurity
- detection-engineering
- devops
- kql