Kustomize generator plugin that generates Secrets from sops-encrypted files
Repository Index
47,133 repositories indexed
49–59 of 59 · Most stars
Security training for the apps you actually ship. Open your browser and start hacking.
Real-time secret-leak guardrails for AI coding agents (Claude Code, Codex), Git hooks, and CI.
🕵️♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
The open-source safety layer for AI agents — block unsafe tool calls, require approval, enforce budgets, audit, replay.
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
- ansible
- ansible-playbook
- devsecops
- infrastructure-as-code
Agile Threat Modeling as Code
- cdk
- modeling
- threagile
- threat
TerraSigma - Modern Detection Engineering for the Cloud-Native SIEM Microsoft Sentinel
- cybersecurity
- detection-engineering
- devops
- kql
Open-source PocketBase security auditor: detects empty rules, the @request.auth.id != trap, true literals. Active probe confirms leaks live.