Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
141 matching repositories for “secret scanning”.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
A fast and powerful CLI tool for finding secrets and other data in files, web pages, and other text sources. Supports multi-threading and advanced pattern matching.
api-keysbugbountycode-securitycredentialscybersecuritydevsecopsgolanginfosec
Source: GitHub repository metadata.
Claude Code mods: panes, bands, prompt guards, secret handling and memory tools
anthropicclaude-codeclaude-code-hooksclaude-code-pluginfunction-hooksredactionsecret-scanning
Source: GitHub repository metadata.
Catch .env secrets leaking into git: a pre-commit hook and CLI that fails when an API key or any value of your env files is staged, tracked or anywhere in the history. Your real values, not patterns.
api-keysclicredentialsdevsecopsdotenvenvenvironment-variablesgit
Source: GitHub repository metadata.
StrataScan is a gray-hat hackers attack-surface reconstruction engine that transforms web history into actionable security intelligence. It combines OSINT, archive forensics, DNS/TLS analysis, subdomain discovery, secret detection, temporal diffing, live verification, evidence correlation, and automated reporting.
archive-forensicsarchive-orgdigital-forensicsdns-securityforensics-toolsgray-hat-hacking-toolmetadata-extractionosint-tool
Source: GitHub repository metadata.
Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.
bugbountycredentialsdevsecopsleaksosintreconscanningsecret
Source: GitHub repository metadata.
Find, verify, and analyze leaked credentials
credentialsdevsecopsdynamic-analysisprecommitscanningsecretsecret-managementsecrets
Source: GitHub repository metadata.
(in)secure git workshop 🔓+🔑 = 🔐
cicdcontainer-scanningdastdemolabsastsecret-scanningsecurity
Source: GitHub repository metadata.
Local, Docker-based security scanner for any project. Combines Gitleaks, OSV-Scanner, Semgrep, Trivy, actionlint and zizmor into one command and one human-readable report (EN/TR). Scans a temporary copy and leaves only the report behind.
dependency-scanninglocal-firstsecret-scanningsecuritysecurity-scannervulnerability-scanner
Source: GitHub repository metadata.
🛡️ Self-hosted vulnerability scanner — scan websites, IPs & code against 100k+ CVEs (NVD + CISA KEV), live scan logs, SARIF reports, CLI & scheduled scans. Two dependencies, zero cloud.
appseccisa-kevcvecybersecuritydependency-scanningdevsecopsepssnodejs
Source: GitHub repository metadata.
Defensive security audit toolkit for authorized web and local projects.
auditdefensive-securitydependency-scanningowaspsarifsecrets-scanningsecuritystatic-analysis
Source: GitHub repository metadata.
Audit de sécurité de vos dépôts GitHub et de vos domaines : dépendances, secrets, configuration, licences, SSL.
dependency-scanningelectrongithubnextjsscasecret-scanningsecurity
Source: GitHub repository metadata.
Scanning APK file for URIs, endpoints & secrets.
android-securityapkapk-parserbugbountymobile-securityreverse-engineeringscanning-apkstatic-analysis
Source: GitHub repository metadata.
[⚠️ Work in progress - Not finished ⚠️] 📘 Personal study guide for the GH‑500: GitHub Advanced Security (GHAS) certification - Includes guides, anki flashcards, hands‑on labs, and reference materials.
ankicode-scanningdependabotflashcardsgithubmicrosoftmicrosoft-learnsecret-scanning
Source: GitHub repository metadata.
Free, no-login security scanner for any public GitHub repo. Check for leaked secrets, malware, malicious packages, typosquats, vulnerable dependencies (OSV) and bad binaries (VirusTotal) before you clone. Swap github.com to friskit.dev.
appseccloudflare-workerscode-securitydependency-scanningdevsecopsgithubmalicious-packagesmalware-scanner
Source: GitHub repository metadata.
DevSecOps security pipeline with GitLab CI/CD, Semgrep, Gitleaks, npm audit, Docker, and Trivy.
application-securityappseccontainer-securitycybersecurity-portfoliodependency-scanningdevsecopsdockergitlab-ci
Source: GitHub repository metadata.
Deterministic security gate for AI-assisted repositories: orchestrates pinned scanners, normalizes findings, enforces allowlist policy, and avoids leaking secrets.
agent-securityai-securityci-securitydependency-scanningdevsecopsgitleaksosv-scannerpolicy-as-code
Source: GitHub repository metadata.
CLI that scans a repo for hardcoded secrets and known-vulnerable dependencies, outputs a scored report.
application-securitydependency-scanningpythonsecret-scanningsecurity-scanner
Source: GitHub repository metadata.
( In a last-phase )Rule-based security scanner for secrets, insecure code patterns, and vulnerable dependencies. Integrates with GitHub pull requests to enforce security policies and report findings before merge.
dependency-scanningdevsecopsgithub-apppythonsastsecret-scanningsecurity-automationsecurity-scanner
Source: GitHub repository metadata.
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
archive-integritychat-archivechat-exportchat-privacyjsonloffline-scannerpersonal-data-scanningprivacy-audit
Source: GitHub repository metadata.
Claude Code plugin and standalone CLI that deep-scans git repositories for secrets, PII, code vulnerabilities, git-history leaks, and dependency CVEs. Secrets are redacted in all output; --ci mode fails the build on HIGH/CRITICAL findings.
anthropicclaude-codeclaude-code-pluginclaude-pluginclicvedependency-scanningdevsecops
Source: GitHub repository metadata.
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.