1.aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+4,299 stars
from 34,599 · score 8.37
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
12 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
2.gitleaks / gitleaks
Find secrets with Gitleaks 🔑
+4,154 stars
from 26,421 · score 8.33
3.trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
+3,025 stars
from 25,792 · score 8.01
4.bytebase / bytebase
Database governance built for humans and agents — controlling changes and access across every major database.
+805 stars
from 13,861 · score 6.69
5.gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
+373 stars
from 11,480 · score 5.92
6.turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
+223 stars
from 7,769 · score 5.41
7.Bearer / bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
+152 stars
from 2,627 · score 5.03
8.deepfence / SecretScanner
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
+135 stars
from 3,263 · score 4.91
9.safedep / vet
Protect against malicious open source packages 🤖
+102 stars
from 1,021 · score 4.63
10.aquasecurity / tfsec
Tfsec is now part of Trivy
+101 stars
from 6,957 · score 4.62
11.pii-shield / pii-shield
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
+79 stars
from 99 · score 4.38
12.kazhuravlev / database-gateway
Safe access to production databases
+5 stars
from 35 · score 1.79