#Secrets-management

Showing 52 of 52 repositories tagged #secrets-management, ranked by stars

Infisical
Infisical
infisical

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Score
100
โ˜… 27.8k โ‘‚ 2.1k +19/day
TypeScript
dotenvx
dotenvx
dotenvx

a secure dotenvโ€“from the creator of `dotenv`

Score
100
โ˜… 5.6k โ‘‚ 146 +11/day
JavaScript
eth0izzle
eth0izzle
shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

Score
50
โ˜… 4.0k โ‘‚ 481 โ€”
JavaScript
deepfence
deepfence
SecretScanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

Score
88
โ˜… 3.4k โ‘‚ 347 โ€”
Go
external-secrets
external-secrets
kubernetes-external-secrets

Integrate external secret management systems with Kubernetes

Score
90
โ˜… 2.6k โ‘‚ 396 โ€”
JavaScript
jkroepke
jkroepke
helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

Score
100
โ˜… 2.0k โ‘‚ 154 โ€”
Shell
GitGuardian
GitGuardian
ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Score
93
โ˜… 2.0k โ‘‚ 206 +1/day
Python
Infisical
Infisical
agent-vault

A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.

Score
75
โ˜… 1.8k โ‘‚ 105 +90/day
Go
mprimi
mprimi
portable-secret

Better privacy without special software

Score
40
โ˜… 1.7k โ‘‚ 117 โ€”
HTML
drduh
drduh
pwd.sh

GnuPG symmetric secrets manager using Bash.

Score
33
โ˜… 1.6k โ‘‚ 136 โ€”
Shell
OWASP
OWASP
wrongsecrets

Vulnerable app with examples showing how to not use secrets

Score
100
โ˜… 1.4k โ‘‚ 589 โ€”
Java
betterleaks
betterleaks
betterleaks

Scan the world (for secrets)

Score
62
โ˜… 1.4k โ‘‚ 102 +2/day
Go
mongodb
mongodb
kingfisher

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 950+ rules.

Score
87
โ˜… 1.2k โ‘‚ 108 +1/day
Rust
phasehq
phasehq
console

Application secrets and configuration management for developers.

Score
0
โ˜… 887 โ‘‚ 63 +1/day
TypeScript
envkey
envkey
envkey

Simple, end-to-end encrypted configuration and secrets management

Score
25
โ˜… 670 โ‘‚ 43 โ€”
TypeScript
drduh
drduh
Purse

GnuPG asymmetric secrets manager - works with YubiKey!

Score
27
โ˜… 615 โ‘‚ 43 +2/day
Shell
rohitcoder
rohitcoder
hawk-eye

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

Score
80
โ˜… 498 โ‘‚ 56 โ€”
Python
fluxcd
fluxcd
helm-operator-get-started

Managing Helm releases with Flux Helm Operator

Score
70
โ˜… 449 โ‘‚ 652 โ€”
HTML
HugoRCD
HugoRCD
shelve

Open-source secret & environment management. Secure, simple, collaborative. CLI & Github Sync

Score
67
โ˜… 432 โ‘‚ 38 โ€”
TypeScript
1Password
1Password
terraform-provider-onepassword

Use the 1Password Terraform Provider to reference, create, or update items in your 1Password Vaults.

Score
95
โ˜… 394 โ‘‚ 74 +1/day
Go
DopplerHQ
DopplerHQ
cli

The official CLI for interacting with your Doppler secrets and configuration.

Score
73
โ˜… 383 โ‘‚ 76 +4/day
Go
slok
slok
agebox

Age based repository file encryption gitops tool

Score
47
โ˜… 363 โ‘‚ 18 โ€”
Go
cruise-automation
cruise-automation
daytona

A Vault client, but for containers and servers.

Score
35
โ˜… 326 โ‘‚ 33 +2/day
Go
moabukar
moabukar
CKS-Exercises-Certified-Kubernetes-Security-Specialist

A set of curated exercises to help you prepare for the CKS exam

Score
50
โ˜… 288 โ‘‚ 177 โ€”
Shell
spinningfactory
spinningfactory
kloak

Cloud native zero trust security for AI agents run environments

Score
80
โ˜… 238 โ‘‚ 11 +1/day
C
Michaelliv
Michaelliv
psst

๐Ÿคซ AI-native secrets manager. Agents use secrets without seeing them.

Score
53
โ˜… 228 โ‘‚ 16 +2/day
TypeScript
PrismorSec
PrismorSec
prismor

Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.

Score
60
โ˜… 227 โ‘‚ 18 +5/day
Python
1Password
1Password
connect-sdk-go

Go SDK for 1Password Connect

Score
38
โ˜… 189 โ‘‚ 26 โ€”
Go
spiffe
spiffe
spike

SPIKE is a lightweight secrets store that uses SPIFFE as its identity control plane. It protects your secrets and helps your ops, SREs, and sysadmins manage sensitive data securely with minimal overhead.

Score
75
โ˜… 167 โ‘‚ 29 +1/day
Go
digitalis-io
digitalis-io
vals-operator

Kubernetes Operator to sync secrets between different secret backends and Kubernetes

Score
60
โ˜… 167 โ‘‚ 8 โ€”
Go
1Password
1Password
ansible-onepasswordconnect-collection

The 1Password Connect collection contains modules that interact with your 1Password Connect deployment. The modules communicate with the 1Password Connect API to support Vault Item create/read/update/delete operations.

Score
65
โ˜… 137 โ‘‚ 18 โ€”
Python
secrethub
secrethub
secrethub-cli

A secrets management platform that every engineer can use with minimal code changes.

Score
30
โ˜… 137 โ‘‚ 22 โ€”
Go
1Password
1Password
connect-helm-charts

Official 1Password Helm Charts

Score
85
โ˜… 128 โ‘‚ 93 โ€”
Makefile
cloudposse
cloudposse
terraform-aws-ssm-parameter-store

Terraform module to populate AWS Systems Manager (SSM) Parameter Store with values from Terraform. Works great with Chamber.

Score
40
โ˜… 120 โ‘‚ 64 โ€”
HCL
reyamira
reyamira
pass-cli

A secure, cross-platform, always-free, and open-source alternative to 1password, bitwarden, etc., Password and API key manager for folks who live in the command line. (CLI + TUI)

Score
75
โ˜… 89 โ‘‚ 3 +1/day
Go
joelhooks
joelhooks
agent-secrets

๐Ÿ›ก๏ธ Portable credential management for AI agents โ€” Age encryption, session leases, killswitch

Score
12
โ˜… 88 โ‘‚ 5 โ€”
Go
stefanprodan
stefanprodan
openfaas-flux

OpenFaaS Kubernetes cluster state management with FluxCD

Score
25
โ˜… 79 โ‘‚ 37 โ€”
HTML
EladLeev
EladLeev
kubeseal-convert

A tool for importing secrets from a pre-existing secrets management systems (e.g. Vault, Secrets Manager) into a SealedSecret :shushing_face:

Score
55
โ˜… 74 โ‘‚ 8 +1/day
Go
canidam
canidam
libvault

A lightweight Vault client module written in Go, with no dependencies, that is intuitive and user-friendly

Score
0
โ˜… 73 โ‘‚ 6 โ€”
Go
tumblr
tumblr
k8s-secret-projector

Kubernetes Secret generation from secure credential repos

Score
15
โ˜… 69 โ‘‚ 3 โ€”
Go
agentrhq
agentrhq
authsome

Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated โ€” headless, no SaaS, agents never see your credentials.

Score
50
โ˜… 66 โ‘‚ 7 +5/day
Python
nrvnrvn
nrvnrvn
secreter

โ›”๏ธ DEPRECATED Kubernetes operator and CLI tool for encrypting and managing Kubernetes secrets

Score
7
โ˜… 65 โ‘‚ 7 โ€”
Go
jetify-com
jetify-com
envsec

Securely store environment variables and secrets in the cloud of your choice.

Score
20
โ˜… 61 โ‘‚ 5 โ€”
Go
mostafahussein
mostafahussein
conceal

A command line utility that provides a secure method to get your secrets from your existing password manager. :lock:

Score
0
โ˜… 61 โ‘‚ 3 โ€”
Go
secrethub
secrethub
secrethub-go

Golang SDK for the SecretHub Secrets Management API

Score
20
โ˜… 56 โ‘‚ 10 โ€”
Go
nokuoo
nokuoo
nokuo

Local-first encrypted vault for API keys, tokens, SSH keys, database credentials, and developer configs. Nokuo ๆ˜ฏไธ€ไธชๆœฌๅœฐไผ˜ๅ…ˆ็š„ๅผ€ๅ‘่€…ๅฏ†้’ฅไฟ้™ฉๅบ“๏ผŒ็”จไบŽๅฎ‰ๅ…จ็ฎก็† API ๅฏ†้’ฅใ€ไปค็‰Œๅ’Œๅ‡ญ่ฏใ€‚

Score
25
โ˜… 50 โ‘‚ 0 +50/day
secrethub
secrethub
terraform-provider-secrethub

Terraform Provider to manage and use secrets

Score
10
โ˜… 49 โ‘‚ 10 โ€”
Go
runwayml
runwayml
awssecret2env

Convert secrets stored in AWS Secrets Manager to environment variables

Score
45
โ˜… 48 โ‘‚ 9 โ€”
Go
itscontained
itscontained
secret-manager

External secret management for Kubernetes.

Score
5
โ˜… 41 โ‘‚ 11 โ€”
Go
GitGuardian
GitGuardian
gitguardian-vscode

Stop leaks. Safeguard your secrets with GitGuardian. GitGuardian actively prevents accidental exposure of sensitive information in your code, allowing you to code confidently and maintain the integrity of your data.

Score
0
โ˜… 38 โ‘‚ 4 โ€”
TypeScript
Ibotta
Ibotta
sopstool

SOPS multi-file wrapper. Note: project is EOL.

Score
0
โ˜… 38 โ‘‚ 6 โ€”
Go
ivan-sincek
ivan-sincek
file-scraper

Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.

Score
13
โ˜… 18 โ‘‚ 3 โ€”
Python
Related Topics
#security#secrets#kubernetes#golang#go#security-tools#cli#devops#vault#devsecops#environment-variables#secret-management

ยฉ 2026 GitRepoTrend ยท GitHub repositories by topic ยท Updated weekly