AwesomeRepos
Sign in

Tags / Security /

Secrets management

Tool that stores and delivers secrets for apps and infrastructure, such as Vault or SOPS; not a password manager.

Repositories

10

Net stars gained, last 7 days

+666

Top-level Tag

Security

Net stars gained each day, last 90 days

2026-10-21: +240 net stars. Most from notinferred/keypaste, +189.2026-10-22: +163 net stars. Most from notinferred/keypaste, +116.2026-10-28: +255 net stars. Most from notinferred/keypaste, +167.

Peak days

  1. 1

    Oct 21, 2026 +240 net stars (median day +38)

  2. 2

    Oct 22, 2026 +163 net stars (median day +38)

  3. 3

    Oct 28, 2026 +255 net stars (median day +38)

A peak day has at least 2 times the net stars of the median day of this chart, and at least 100 more. For each peak day, the list shows the repositories that gained the most net stars that day. It also shows their GitHub releases of that day or the day before (UTC), and their creation date when it was 14 days or less before. These events occur near the same day. They do not show why the stars came.

Largest

Most stars in total now.

  1. hashicorp/vault36K

    readme: Vault is a tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more.

  2. Infisical/infisical30K

    readme: Centralize your application secrets and configuration across every environment, with versioning, rotation, and leak prevention built in.

  3. getsops/sops24K

    description: Simple and flexible tool for managing secrets

  4. bitnami/sealed-secrets9.3K

    readme: Encrypt your Secret into a SealedSecret, which *is* safe to store - even inside a public repository.

  5. 99designs/aws-vault9K

    readme: AWS Vault stores IAM credentials in your operating system's secure keystore and then generates temporary credentials from those to expose to your shell and applications.

  6. StackExchange/blackboxarchived · 6.8K

    readme: Safely store secrets in a VCS repo (i.e. Git, Mercurial, Subversion or Perforce).

  7. tellerops/teller3.2K

    description: Cloud native secrets management for developers - never leave your command line for secrets.

  8. square/keywhizarchived · 2.6K

    readme: Keywhiz is a system for distributing and managing secrets.

  9. segmentio/chamber2.6K

    readme: Chamber is a tool for managing secrets. Currently it does so by storing secrets in SSM Parameter Store, an AWS service for storing secrets.

  10. notinferred/keypaste795

    readme: keypaste keeps your logins and your projects' secrets in one KeePass-compatible vault, and gives an AI agent a secret only when you allow it.

Newest Admissions

Entered the index by the rising rule, newest first.

  1. notinferred/keypaste795

    readme: keypaste keeps your logins and your projects' secrets in one KeePass-compatible vault, and gives an AI agent a secret only when you allow it.

All 10 in the Repository Index

How a repository gets this Tag

An agent reads the description, the GitHub topics, and the start of the README of each repository. It chooses Tags only from the Tag list in the AwesomeRepos source code. For each Tag, it quotes the text. A code check keeps the Tag only when the quote is in that text. The quote under each repository is that evidence. A Tag does not rank repositories. It does not say that one repository can replace another. To report a wrong Tag, use "Report a problem with this page" on the page of the repository. All numbers on this page count only visible repositories.