#Secret-management

Showing 46 of 46 repositories tagged #secret-management, ranked by stars

Infisical
Infisical
infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Score
80
β˜… 27.8k β‘‚ 2.1k +19/day
TypeScript
trufflesecurity
trufflesecurity
trufflehog

Find, verify, and analyze leaked credentials

Score
100
β˜… 27.0k β‘‚ 2.5k +5/day
Go
getsops
getsops
sops

Simple and flexible tool for managing secrets

Score
60
β˜… 22.3k β‘‚ 1.1k +44/day
Go
openbao
openbao
openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Score
40
β˜… 6.6k β‘‚ 478 +5/day
Go
dotenvx
dotenvx
dotenvx

a secure dotenv–from the creator of `dotenv`

Score
100
β˜… 5.6k β‘‚ 146 +11/day
JavaScript
tellerops
tellerops
teller

Cloud native secrets management for developers - never leave your command line for secrets.

Score
50
β˜… 3.2k β‘‚ 201 +4/day
Rust
onecli
onecli
onecli

Open-source credential gateway with a built-in vault. give your AI agents access to services without exposing keys.

Score
100
β˜… 2.5k β‘‚ 133 +13/day
TypeScript
jkroepke
jkroepke
helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

Score
100
β˜… 2.0k β‘‚ 154 β€”
Shell
sniptt-official
sniptt-official
ots

πŸ” Share end-to-end encrypted secrets with others via a one-time URL

Score
0
β˜… 1.8k β‘‚ 52 β€”
Go
tillson
tillson
git-hound

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Score
100
β˜… 1.4k β‘‚ 204 +1/day
Go
zendesk
zendesk
helm-secrets

DEPRECATED A helm plugin that help manage secrets with Git workflow and store them anywhere

Score
74
β˜… 1.1k β‘‚ 150 β€”
Shell
argoproj-labs
argoproj-labs
argocd-vault-plugin

An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets

Score
0
β˜… 971 β‘‚ 218 β€”
Go
phasehq
phasehq
console

Application secrets and configuration management for developers.

Score
0
β˜… 887 β‘‚ 63 +1/day
TypeScript
keyshade-xyz
keyshade-xyz
keyshade

Realtime secret and configuration management tool

Score
92
β˜… 760 β‘‚ 261 +2/day
TypeScript
okta-graveyard
okta-graveyard
repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets. :mag:

Score
58
β˜… 654 β‘‚ 89 β€”
JavaScript
1Password
1Password
onepassword-operator

The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.

Score
20
β˜… 615 β‘‚ 71 β€”
Go
PierreBeucher
PierreBeucher
novops

Cross-platform secret & config manager for development and CI environments

Score
42
β˜… 471 β‘‚ 21 β€”
Rust
DopplerHQ
DopplerHQ
cli

The official CLI for interacting with your Doppler secrets and configuration.

Score
83
β˜… 383 β‘‚ 76 +4/day
Go
cyberark
cyberark
secretless-broker

Secure your apps by making them Secretless

Score
95
β˜… 378 β‘‚ 53 +1/day
Go
kontext-security
kontext-security
kontext-cli

Open-source Runtime Security for tool-using AI agents providing permissions, credentials, policy enforcement, and audit trails.

Score
50
β˜… 207 β‘‚ 7 +1/day
Go
vmware
vmware
secrets-manager

VMware Secrets Manager is a lightweight secrets manager to protect your sensitive data. It’s perfect for edge deployments where energy and footprint requirements are strictβ€”See more: https://vsecm.com/

Score
68
β˜… 177 β‘‚ 30 β€”
Go
Checkmarx
Checkmarx
2ms

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

Score
75
β˜… 156 β‘‚ 33 β€”
Go
1Password
1Password
ansible-onepasswordconnect-collection

The 1Password Connect collection contains modules that interact with your 1Password Connect deployment. The modules communicate with the 1Password Connect API to support Vault Item create/read/update/delete operations.

Score
89
β˜… 137 β‘‚ 18 β€”
Python
secrethub
secrethub
secrethub-cli

A secrets management platform that every engineer can use with minimal code changes.

Score
58
β˜… 137 β‘‚ 22 β€”
Go
macalbert
macalbert
envilder

One secret mapping for local dev, CI/CD, and runtime. Envilder resolves cloud secrets from your own vaults without SaaS middlemen, duplicated config, or .env drift.

Score
79
β˜… 137 β‘‚ 5 β€”
TypeScript
OT-CONTAINER-KIT
OT-CONTAINER-KIT
k8s-vault-webhook

A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers

Score
53
β˜… 117 β‘‚ 12 β€”
Go
pinkpixel-dev
pinkpixel-dev
keyper

πŸ” A self-hosted credential manager with zero-knowledge encryption, multi-user support, and emergency recovery. Store API keys, passwords, and secrets securely with your own database. Features AES-256-GCM encryption, Argon2 key derivation, PWA support, and professional-grade security architecture.

Score
67
β˜… 105 β‘‚ 3 β€”
TypeScript
envkey
envkey
envkey-app

Secure, human-friendly, cross-platform secrets and config.

Score
25
β˜… 99 β‘‚ 9 β€”
JavaScript
MeltwaterArchive
MeltwaterArchive
secretary

DEPRECATED Secrets management for dynamic environments

Score
42
β˜… 92 β‘‚ 8 β€”
Go
Infisical
Infisical
infisical-node

β™Ύ Official Infisical SDK for Node

Score
17
β˜… 72 β‘‚ 19 β€”
JavaScript
bbl
bbl
secretize

Kubernetes secrets generator plugin for kustomize

Score
63
β˜… 71 β‘‚ 6 β€”
Go
tellerops
tellerops
helm-teller

Allows you to manage configuration and secrets from multiple provider while masking the secrets at the deployment

Score
32
β˜… 69 β‘‚ 9 β€”
Go
c0dearm
c0dearm
sharks

Fast, small and secure Shamir's Secret Sharing library crate

Score
0
β˜… 68 β‘‚ 14 β€”
Rust
lgallard
lgallard
terraform-aws-secrets-manager

Terraform module to create Amazon Secrets Manager resources.

Score
84
β˜… 65 β‘‚ 48 β€”
HCL
DopplerHQ
DopplerHQ
cli-action

GitHub Action for installing the Doppler CLI

Score
50
β˜… 64 β‘‚ 14 +1/day
JavaScript
envkey
envkey
envkey-source

Set OS-level shell environment variables with EnvKey. Allows EnvKey to be used with any language. Pairs well with Docker.

Score
8
β˜… 63 β‘‚ 11 β€”
Go
jetify-com
jetify-com
envsec

Securely store environment variables and secrets in the cloud of your choice.

Score
33
β˜… 61 β‘‚ 5 β€”
Go
nrkno
nrkno
terraform-provider-lastpass

Terraform Lastpass provider

Score
21
β˜… 59 β‘‚ 8 β€”
Go
roboll
roboll
kube-vault-controller

Claim secrets from Vault for use in Kubernetes.

Score
37
β˜… 59 β‘‚ 18 β€”
Go
envkey
envkey
envkey-node

EnvKey's official Node.js client library

Score
11
β˜… 49 β‘‚ 10 β€”
JavaScript
secrethub
secrethub
actions

Load secrets into GitHub Actions

Score
26
β˜… 48 β‘‚ 16 β€”
Shell
totango
totango
helm-ssm

A low dependency tool for retrieving and injecting secrets from AWS SSM into Helm

Score
16
β˜… 42 β‘‚ 14 β€”
Shell
whxitte
whxitte
gixposed

Gixposed is a powerful command-line tool designed to search the commit history of Git repositories for sensitive information, such as API keys and access tokens. Its purpose is to help developers and security professionals quickly identify and remediate exposed sensitive informations in their codebases.

Score
0
β˜… 39 β‘‚ 0 β€”
Shell
kumarvna
kumarvna
terraform-azurerm-key-vault

Terraform module to create a Key Vault in Azure cloud.

Score
47
β˜… 35 β‘‚ 43 β€”
HCL
envkey
envkey
envkeygo

EnvKey's official Go client library

Score
5
β˜… 35 β‘‚ 1 β€”
Go
Babbili
Babbili
vault-golang

Hashicorp Vault server on Kubernetes for centralized secret management and encryption. and a Go application that accesses Vault using approle auth and retrieve secrets from Vault KV v2 secret engine

Score
0
β˜… 12 β‘‚ 3 β€”
Smarty
Related Topics
#secrets#security#security-tools#kubernetes#environment-variables#golang#vault#devops#cli#secrets-management#go#encryption

Β© 2026 GitRepoTrend Β· GitHub repositories by topic Β· Updated weekly