#Secrets

Showing 60 of 112 repositories tagged #secrets, ranked by stars

hashicorp
hashicorp
vault

A tool for secrets management, encryption as a service, and privileged access management

Score
100
★ 35.9k ⑂ 4.7k +9/day
Go
Infisical
Infisical
infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Score
88
★ 27.8k ⑂ 2.1k +19/day
TypeScript
trufflesecurity
trufflesecurity
trufflehog

Find, verify, and analyze leaked credentials

Score
94
★ 27.0k ⑂ 2.5k +5/day
Go
stakater
stakater
Reloader

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!

Score
81
★ 10.2k ⑂ 655 +14/day
Go
dotenvx
dotenvx
dotenvx

a secure dotenv–from the creator of `dotenv`

Score
100
★ 5.6k ⑂ 146 +11/day
JavaScript
eth0izzle
eth0izzle
shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

Score
56
★ 4.0k ⑂ 481
JavaScript
deepfence
deepfence
SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Score
75
★ 3.4k ⑂ 347
Go
tellerops
tellerops
teller

Cloud native secrets management for developers - never leave your command line for secrets.

Score
100
★ 3.2k ⑂ 201 +4/day
Rust
praetorian-inc
praetorian-inc
noseyparker

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

Score
67
★ 2.3k ⑂ 132
Rust
jkroepke
jkroepke
helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

Score
100
★ 2.0k ⑂ 154
Shell
nsonaniya2010
nsonaniya2010
SubDomainizer

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Score
40
★ 1.9k ⑂ 236
Python
emberstack
emberstack
kubernetes-reflector

Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.

Score
97
★ 1.6k ⑂ 123 +4/day
C#
drduh
drduh
pwd.sh

GnuPG symmetric secrets manager using Bash.

Score
57
★ 1.6k ⑂ 136
Shell
OWASP
OWASP
wrongsecrets

Vulnerable app with examples showing how to not use secrets

Score
100
★ 1.4k ⑂ 589
Java
tillson
tillson
git-hound

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Score
95
★ 1.4k ⑂ 204 +1/day
Go
betterleaks
betterleaks
betterleaks

Scan the world (for secrets)

Score
69
★ 1.4k ⑂ 102 +2/day
Go
P3GLEG
P3GLEG
Whaler

Program to reverse Docker images into Dockerfiles

Score
92
★ 1.2k ⑂ 103 +2/day
Go
lmammino
lmammino
jwt-cracker

Simple HS256, HS384 & HS512 JWT token brute force cracker.

Score
51
★ 1.2k ⑂ 167
JavaScript
mongodb
mongodb
kingfisher

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 950+ rules.

Score
97
★ 1.2k ⑂ 108 +1/day
Rust
zendesk
zendesk
helm-secrets

DEPRECATED A helm plugin that help manage secrets with Git workflow and store them anywhere

Score
68
★ 1.1k ⑂ 150
Shell
phasehq
phasehq
console

Application secrets and configuration management for developers.

Score
100
★ 887 ⑂ 63 +1/day
TypeScript
blacklanternsecurity
blacklanternsecurity
badsecrets

A library for detecting known secrets across many web frameworks

Score
80
★ 809 ⑂ 82 +4/day
Python
asamassekou10
asamassekou10
ship-safe

CLI security scanner built for the agentic era. Detects CI/CD misconfigs, agent permission risks, MCP tool injection, hardcoded secrets, and DMCA-flagged AI dependencies.

Score
84
★ 758 ⑂ 83 +17/day
JavaScript
momenbasel
momenbasel
keyFinder

Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

Score
86
★ 692 ⑂ 120 +2/day
JavaScript
ricoberger
ricoberger
vault-secrets-operator

Create Kubernetes secrets from Vault for a secure GitOps based workflow.

Score
94
★ 686 ⑂ 107
Go
sgasser
sgasser
pasteguard

AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.

Score
81
★ 665 ⑂ 33 +1/day
TypeScript
okta-graveyard
okta-graveyard
repo-supervisor

Scan your code for security misconfiguration, search for passwords and secrets. :mag:

Score
49
★ 654 ⑂ 89
JavaScript
drduh
drduh
Purse

GnuPG asymmetric secrets manager - works with YubiKey!

Score
43
★ 615 ⑂ 43 +2/day
Shell
gitleaks
gitleaks
gitleaks-action

Protect your secrets using Gitleaks-Action

Score
89
★ 612 ⑂ 193 +2/day
JavaScript
manifoldco
manifoldco
torus-cli

A secure, shared workspace for secrets

Score
31
★ 606 ⑂ 30
Go
jonasvinther
jonasvinther
medusa

A cli tool for importing and exporting Hashicorp Vault secrets

Score
38
★ 598 ⑂ 75
Go
algolia
algolia
sup3rS3cretMes5age

Simple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backend

Score
62
★ 568 ⑂ 83 +1/day
Go
godaddy
godaddy
tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Score
78
★ 514 ⑂ 71
Python
Skyscanner
Skyscanner
whispers

Identify hardcoded secrets in static structured text

Score
38
★ 504 ⑂ 70
Python
WatchDogSecurity
WatchDogSecurity
porch-pirate

Porch Pirate is the most comprehensive Postman recon / OSINT client and framework that facilitates the automated discovery and exploitation of API endpoints and secrets committed to workspaces, collections, requests, users and teams. Porch Pirate can be used as a client or be incorporated into your own applications.

Score
35
★ 464 ⑂ 57 +1/day
Python
SparebankenVest
SparebankenVest
azure-key-vault-to-kubernetes

Azure Key Vault to Kubernetes (akv2k8s for short) makes it simple and secure to use Azure Key Vault secrets, keys and certificates in Kubernetes.

Score
91
★ 452 ⑂ 97
Go
rogerluan
rogerluan
arkana

Use dotenv files for Android and iOS projects.

Score
50
★ 447 ⑂ 20
Ruby
0xdsm
0xdsm
Pinkerton

🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.

Score
60
★ 439 ⑂ 55 +2/day
Python
tailscale
tailscale
setec

A secrets management service that uses Tailscale for access control

Score
50
★ 438 ⑂ 20
Go
HugoRCD
HugoRCD
shelve

Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync

Score
73
★ 432 ⑂ 38
TypeScript
shalb
shalb
cluster.dev

Cloud-native infrastructure templating. Creating cloud installers for SaaS. Replication of complex cloud-native infrastructures.

Score
79
★ 421 ⑂ 36
Go
DopplerHQ
DopplerHQ
cli

The official CLI for interacting with your Doppler secrets and configuration.

Score
76
★ 383 ⑂ 76 +4/day
Go
slok
slok
agebox

Age based repository file encryption gitops tool

Score
62
★ 363 ⑂ 18
Go
cruise-automation
cruise-automation
daytona

A Vault client, but for containers and servers.

Score
50
★ 326 ⑂ 33 +2/day
Go
illarion
illarion
lockenv

Simple, password-based encrypted vault for .env and infrastructure secrets. Like git-crypt or sops, but dramatically simpler. Ideal for small teams and IaC workflows

Score
88
★ 282 ⑂ 6
Go
envless
envless
envless

OpenSource, frictionless and secure way to share and manage app secrets across teams.

Score
0
★ 276 ⑂ 37
TypeScript
Keeper-Security
Keeper-Security
Commander

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

Score
80
★ 245 ⑂ 82
Python
spinningfactory
spinningfactory
kloak

Cloud native zero trust security for AI agents run environments

Score
85
★ 238 ⑂ 11 +1/day
C
Michaelliv
Michaelliv
psst

🤫 AI-native secrets manager. Agents use secrets without seeing them.

Score
70
★ 228 ⑂ 16 +2/day
TypeScript
SonarSource
SonarSource
sonarqube-cli

Command-line interface for SonarQube with AI agent integration. Scan for secrets and get fast feedback on code quality and security from your terminal.

Score
68
★ 207 ⑂ 8 +6/day
TypeScript
twilio-labs
twilio-labs
deadshot

Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository

Score
0
★ 192 ⑂ 13
Python
digitalis-io
digitalis-io
vals-operator

Kubernetes Operator to sync secrets between different secret backends and Kubernetes

Score
74
★ 167 ⑂ 8
Go
Checkmarx
Checkmarx
2ms

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

Score
59
★ 156 ⑂ 33
Go
macalbert
macalbert
envilder

One secret mapping for local dev, CI/CD, and runtime. Envilder resolves cloud secrets from your own vaults without SaaS middlemen, duplicated config, or .env drift.

Score
71
★ 137 ⑂ 5
TypeScript
secrethub
secrethub
secrethub-cli

A secrets management platform that every engineer can use with minimal code changes.

Score
41
★ 137 ⑂ 22
Go
cloudposse
cloudposse
terraform-aws-ssm-parameter-store

Terraform module to populate AWS Systems Manager (SSM) Parameter Store with values from Terraform. Works great with Chamber.

Score
56
★ 120 ⑂ 64
HCL
OT-CONTAINER-KIT
OT-CONTAINER-KIT
k8s-vault-webhook

A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers

Score
38
★ 117 ⑂ 12
Go
gopaddle-io
gopaddle-io
configurator

Synchronize and Version Control ConfigMaps & Secrets across Deployment Rollouts.

Score
44
★ 115 ⑂ 42
Go
Isan-Rivkin
Isan-Rivkin
surf

CLI Text Search across your infrastructure platforms, Universal Ctrl+F for infra

Score
29
★ 114 ⑂ 4
Go
Keeper-Security
Keeper-Security
secrets-manager

Keeper Secrets Manager is a cloud-based, zero-knowledge platform for securing infrastructure secrets. Provides automatic password rotation and integration into popular DevOps CI/CD tools.

Score
82
★ 114 ⑂ 58 +1/day
Python
Related Topics
#security#secrets-management#security-tools#kubernetes#secret-management#vault#cli#golang#devsecops#go#devops#credentials

© 2026 GitRepoTrend · GitHub repositories by topic · Updated weekly