High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
- Language
- Go
- Licence
- MIT
- Stars
- 5
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
appsecclicredential-scannerdevsecopsgolangleak-detectionsarifsecret-detection
Source: GitHub repository metadata.
Schema-aware secret scanner for cloud logs with regex filtering, Shannon entropy analysis, and JSON structural tracking.
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 5
- Last push
- 2026-10-20
- Indexed
- 2026-11-08
awsclicloud-securitycloudtrailcredentialsdevsecopsentropyhacktoberfest
Source: GitHub repository metadata.
High-precision secret scanner for code, tickets, logs, and web app with ml validation
- Language
- Go
- Licence
- Not specified
- Stars
- 31
- Last push
- 2026-10-29
- Indexed
- 2026-11-08
appseccredentialsdevsecopssecret-detectionsecret-scanningsecretssecurity
Source: GitHub repository metadata.
Zero-config pre-commit secret scanner for Git repositories.
- Language
- Go
- Licence
- MIT
- Stars
- 10
- Last push
- 2026-04-02
- Indexed
- 2026-11-08
clideveloper-toolsdevsecopsgitgit-hooksgogolangpre-commit
Source: GitHub repository metadata.
Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass
- Language
- Go
- Licence
- MIT
- Stars
- 28
- Last push
- 2026-10-01
- Indexed
- 2026-11-08
bugbountycybersecuritydirectory-scannerfuzzerfuzzinggogolangpentesting
Source: GitHub repository metadata.
macOS endpoint scanner for static credential exposure and supply chain attack indicators
- Language
- Python
- Licence
- MIT
- Stars
- 6
- Last push
- 2026-08-27
- Indexed
- 2026-11-08
credentialsdevsecopsenvironment-variablesscanningsecret-managementsecret-scanningsecurity-toolssupply-chain-security
Source: GitHub repository metadata.
GitHub Secret Scanning Auto Remediator (GSSAR)
- Language
- TypeScript
- Licence
- MIT
- Stars
- 51
- Last push
- 2026-09-03
- Indexed
- 2026-11-08
awsgithubjavascriptremediationsecret-scanningtypescript
Source: GitHub repository metadata.
A lightweight, zero-cost Python proxy designed to intercept, audit, and sanitize developer prompts before they reach external LLM APIs. Implements real-time tokenomics, FinOps cost controls, and automated PII/secret scanning for secure AI engineering.
- Language
- Python
- Licence
- MIT
- Stars
- 5
- Last push
- 2026-11-03
- Indexed
- 2026-11-08
ai-securityanthropicdevsecopsfastapifinopsgithub-actionsguardrailsllm
Source: GitHub repository metadata.
Git-aware secret & .env leak guard for TypeScript/Node — sub-second pre-commit scanning with the lowest false-positive rate.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 23
- Last push
- 2026-07-19
- Indexed
- 2026-11-08
clidevsecopsdotenvgit-hookspre-commitsecret-scanningsecretssecurity
Source: GitHub repository metadata.
High-performance open-source security scanner combining SAST, SCA, Secret Detection, and IaC analysis, built for developers and CI/CD pipelines, using AI for recommendation!
- Language
- Go
- Licence
- Not specified
- Stars
- 214
- Last push
- 2026-10-26
- Indexed
- 2026-11-08
aiai-remediationapplication-securitycicd-securitycloud-securitycode-scanningdependency-scanningdevsecops
Source: GitHub repository metadata.
👁️ Free AI code review for every Indian developer. GitHub Action + CLI with two-pass review, one-click fixes and secret scanning, powered by BharatCode.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 10
- Last push
- 2026-10-29
- Indexed
- 2026-11-08
aibharatcodeclicode-reviewdeveloper-toolsgithub-actionsindiallm
Source: GitHub repository metadata.
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
- Language
- Rust
- Licence
- Apache-2.0
- Stars
- 1,297
- Last push
- 2026-11-05
- Indexed
- 2026-11-08
credentialsdevsecopsdynamic-analysishuskymiseprecommitrustsast
Source: GitHub repository metadata.
Security scanner for public GitHub repositories — detects secrets, dangerous code patterns, dependency risks, and security misconfigurations with deterministic scoring.
- Language
- TypeScript
- Licence
- Not specified
- Stars
- 1
- Last push
- 2026-09-07
- Indexed
- 2026-11-08
application-securitycode-securitycybersecuritydependency-scanningdevsecopsgithub-actionsgithub-securitysast
Source: GitHub repository metadata.
Open-source security auditing toolkit for vulnerability assessment, source code analysis, dependency scanning, secret detection, and authorized penetration testing.
- Language
- TypeScript
- Licence
- Apache-2.0
- Stars
- 0
- Last push
- 2026-10-29
- Indexed
- 2026-11-08
cybersecuritydependency-scanningdevsecopsopen-sourceowasppenetration-testingsecret-detectionsecurity-audit
Source: GitHub repository metadata.
A comprehensive CLI tool for managing .env files — validation, secret scanning, and format conversion.
- Language
- Rust
- Licence
- MIT
- Stars
- 46
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
clidevopsdevtoolsdotenvenvenvironment-variablespre-commitrust
Source: GitHub repository metadata.
Universal security scanning skill for AI agents - finds hardcoded secrets, API keys, and vulnerabilities in any codebase. 60 regex rules (46 GitLeaks-informed secret patterns, 14 OWASP Top 10 checks) plus 15 dangerous-file checks. Markdown/SARIF/JSON reports. Works across Claude Code, Cursor, Windsurf, and any agentic platform.
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 5
- Last push
- 2026-10-26
- Indexed
- 2026-11-08
agent-skillsagentskillsai-agentantigravityclaude-codecode-securitycursorhardcoded-secrets
Source: GitHub repository metadata.
Security scanner for source code repositories: finds leaked secrets and insecure patterns, scores the result, and reports as JSON, HTML or SARIF for GitHub code scanning.
- Language
- C#
- Licence
- MIT
- Stars
- 5
- Last push
- 2026-11-05
- Indexed
- 2026-11-08
clicode-scanningcsharpdevsecopsdotnetgithub-actionssarifsast
Source: GitHub repository metadata.
Developer-focused security scanning platform: scans repos for secrets, vulnerable dependencies, insecure code, container/infra misconfig, API and smart-contract risks. CLI, HTTP API, and dashboard.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 0
- Last push
- 2026-11-01
- Indexed
- 2026-11-08
clidependency-scanningdevsecopsdockeriac-securitysastsecret-scanningsecurity
Source: GitHub repository metadata.
GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 153
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
chaindropcode-scanningcredential-theftdependency-scanningdevsecopsgithub-actiongithub-actionsioc
Source: GitHub repository metadata.
A reusable GitLab CI/CD template for automated security scanning, including secrets detection (Gitleaks, Trufflehog), dependency vulnerabilities (Trivy), SAST (Semgrep, SonarQube), DAST (OWASP ZAP), and a consolidated security dashboard. Include this in your gitlab-ci.yml for DevSecOps.
- Language
- Shell
- Licence
- Not specified
- Stars
- 0
- Last push
- 2025-11-19
- Indexed
- 2026-11-08
automationci-cdcwedashboarddastdependency-scanningdevsecopsgitlab
Source: GitHub repository metadata.