Skip to content

Repository search

Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.

Explore topic collections for selection checklists and useful search examples.

Clear filters

141 matching repositories for “secret scanning”.

5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.

High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.

Language
Go
Licence
MIT
Stars
5
Last push
2026-11-08
Indexed
2026-11-08

appsecclicredential-scannerdevsecopsgolangleak-detectionsarifsecret-detection

Source: GitHub repository metadata.

Schema-aware secret scanner for cloud logs with regex filtering, Shannon entropy analysis, and JSON structural tracking.

Language
Python
Licence
Apache-2.0
Stars
5
Last push
2026-10-20
Indexed
2026-11-08

awsclicloud-securitycloudtrailcredentialsdevsecopsentropyhacktoberfest

Source: GitHub repository metadata.

High-precision secret scanner for code, tickets, logs, and web app with ml validation

Language
Go
Licence
Not specified
Stars
31
Last push
2026-10-29
Indexed
2026-11-08

appseccredentialsdevsecopssecret-detectionsecret-scanningsecretssecurity

Source: GitHub repository metadata.

Zero-config pre-commit secret scanner for Git repositories.

Language
Go
Licence
MIT
Stars
10
Last push
2026-04-02
Indexed
2026-11-08

clideveloper-toolsdevsecopsgitgit-hooksgogolangpre-commit

Source: GitHub repository metadata.

Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass

Language
Go
Licence
MIT
Stars
28
Last push
2026-10-01
Indexed
2026-11-08

bugbountycybersecuritydirectory-scannerfuzzerfuzzinggogolangpentesting

Source: GitHub repository metadata.

macOS endpoint scanner for static credential exposure and supply chain attack indicators

Language
Python
Licence
MIT
Stars
6
Last push
2026-08-27
Indexed
2026-11-08

credentialsdevsecopsenvironment-variablesscanningsecret-managementsecret-scanningsecurity-toolssupply-chain-security

Source: GitHub repository metadata.

GitHub Secret Scanning Auto Remediator (GSSAR)

Language
TypeScript
Licence
MIT
Stars
51
Last push
2026-09-03
Indexed
2026-11-08

awsgithubjavascriptremediationsecret-scanningtypescript

Source: GitHub repository metadata.

A lightweight, zero-cost Python proxy designed to intercept, audit, and sanitize developer prompts before they reach external LLM APIs. Implements real-time tokenomics, FinOps cost controls, and automated PII/secret scanning for secure AI engineering.

Language
Python
Licence
MIT
Stars
5
Last push
2026-11-03
Indexed
2026-11-08

ai-securityanthropicdevsecopsfastapifinopsgithub-actionsguardrailsllm

Source: GitHub repository metadata.

Git-aware secret & .env leak guard for TypeScript/Node — sub-second pre-commit scanning with the lowest false-positive rate.

Language
TypeScript
Licence
MIT
Stars
23
Last push
2026-07-19
Indexed
2026-11-08

clidevsecopsdotenvgit-hookspre-commitsecret-scanningsecretssecurity

Source: GitHub repository metadata.

High-performance open-source security scanner combining SAST, SCA, Secret Detection, and IaC analysis, built for developers and CI/CD pipelines, using AI for recommendation!

Language
Go
Licence
Not specified
Stars
214
Last push
2026-10-26
Indexed
2026-11-08

aiai-remediationapplication-securitycicd-securitycloud-securitycode-scanningdependency-scanningdevsecops

Source: GitHub repository metadata.

👁️ Free AI code review for every Indian developer. GitHub Action + CLI with two-pass review, one-click fixes and secret scanning, powered by BharatCode.

Language
TypeScript
Licence
MIT
Stars
10
Last push
2026-10-29
Indexed
2026-11-08

aibharatcodeclicode-reviewdeveloper-toolsgithub-actionsindiallm

Source: GitHub repository metadata.

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

Language
Rust
Licence
Apache-2.0
Stars
1,297
Last push
2026-11-05
Indexed
2026-11-08

credentialsdevsecopsdynamic-analysishuskymiseprecommitrustsast

Source: GitHub repository metadata.

Security scanner for public GitHub repositories — detects secrets, dangerous code patterns, dependency risks, and security misconfigurations with deterministic scoring.

Language
TypeScript
Licence
Not specified
Stars
1
Last push
2026-09-07
Indexed
2026-11-08

application-securitycode-securitycybersecuritydependency-scanningdevsecopsgithub-actionsgithub-securitysast

Source: GitHub repository metadata.

Open-source security auditing toolkit for vulnerability assessment, source code analysis, dependency scanning, secret detection, and authorized penetration testing.

Language
TypeScript
Licence
Apache-2.0
Stars
0
Last push
2026-10-29
Indexed
2026-11-08

cybersecuritydependency-scanningdevsecopsopen-sourceowasppenetration-testingsecret-detectionsecurity-audit

Source: GitHub repository metadata.

A comprehensive CLI tool for managing .env files — validation, secret scanning, and format conversion.

Language
Rust
Licence
MIT
Stars
46
Last push
2026-11-08
Indexed
2026-11-08

clidevopsdevtoolsdotenvenvenvironment-variablespre-commitrust

Source: GitHub repository metadata.

Universal security scanning skill for AI agents - finds hardcoded secrets, API keys, and vulnerabilities in any codebase. 60 regex rules (46 GitLeaks-informed secret patterns, 14 OWASP Top 10 checks) plus 15 dangerous-file checks. Markdown/SARIF/JSON reports. Works across Claude Code, Cursor, Windsurf, and any agentic platform.

Language
Python
Licence
Apache-2.0
Stars
5
Last push
2026-10-26
Indexed
2026-11-08

agent-skillsagentskillsai-agentantigravityclaude-codecode-securitycursorhardcoded-secrets

Source: GitHub repository metadata.

Security scanner for source code repositories: finds leaked secrets and insecure patterns, scores the result, and reports as JSON, HTML or SARIF for GitHub code scanning.

Language
C#
Licence
MIT
Stars
5
Last push
2026-11-05
Indexed
2026-11-08

clicode-scanningcsharpdevsecopsdotnetgithub-actionssarifsast

Source: GitHub repository metadata.

Developer-focused security scanning platform: scans repos for secrets, vulnerable dependencies, insecure code, container/infra misconfig, API and smart-contract risks. CLI, HTTP API, and dashboard.

Language
TypeScript
Licence
MIT
Stars
0
Last push
2026-11-01
Indexed
2026-11-08

clidependency-scanningdevsecopsdockeriac-securitysastsecret-scanningsecurity

Source: GitHub repository metadata.

GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

Language
TypeScript
Licence
MIT
Stars
153
Last push
2026-11-08
Indexed
2026-11-08

chaindropcode-scanningcredential-theftdependency-scanningdevsecopsgithub-actiongithub-actionsioc

Source: GitHub repository metadata.

A reusable GitLab CI/CD template for automated security scanning, including secrets detection (Gitleaks, Trufflehog), dependency vulnerabilities (Trivy), SAST (Semgrep, SonarQube), DAST (OWASP ZAP), and a consolidated security dashboard. Include this in your gitlab-ci.yml for DevSecOps.

Language
Shell
Licence
Not specified
Stars
0
Last push
2025-11-19
Indexed
2026-11-08

automationci-cdcwedashboarddastdependency-scanningdevsecopsgitlab

Source: GitHub repository metadata.

What this index tells you

We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.

Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.

Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.