Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 887
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
ai-agentsai-code-reviewai-generated-codecode-qualitycode-scanningdartdead-codedead-code-detection
Source: GitHub repository metadata.
Local base-URL gateway that redacts secrets and PII before they leave your machine
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 7
- Last push
- 2026-10-10
- Indexed
- 2026-11-08
ai-securityai-toolsclaude-codecodexdlpgatewaygolangllm-security
Source: GitHub repository metadata.
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
- Language
- Python
- Licence
- MIT
- Stars
- 2,013
- Last push
- 2026-11-06
- Indexed
- 2026-11-08
apikeycodecredentialsdevsecopskeyleakprecommitscanning
Source: GitHub repository metadata.
Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 25
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
appsecci-cd-securitycicddevopsdevsecopsgitlabgitlab-cigo
Source: GitHub repository metadata.
Multi-cloud xSPM platform to scan, visualize, and remediate security risks across cloud, containers, and Kubernetes environments.
- Language
- TypeScript
- Licence
- Not specified
- Stars
- 10
- Last push
- 2025-11-27
- Indexed
- 2026-11-08
aws-securityciemcloudcloud-securitycloudsecuritycompliance-checkscontainer-securitycspm
Source: GitHub repository metadata.
Convert any DevOps Pipeline into 8-gate DevSecOps Pipeline with just 10 lines of YAML code - secrets, SAST, SBOM, signing. 100% OSS, free.
- Language
- Shell
- Licence
- Not specified
- Stars
- 8
- Last push
- 2026-08-22
- Indexed
- 2026-11-08
ci-cdcontainer-securitycontinuous-integrationcosigndevsecopsgithub-actionsgithub-actions-ciopen-source
Source: GitHub repository metadata.
Find and redact secrets in AI coding agent histories (Claude Code, and more).
- Language
- Python
- Licence
- MIT
- Stars
- 88
- Last push
- 2026-11-03
- Indexed
- 2026-11-08
ai-agentsclaude-codeclideveloper-toolsdlpgood-first-issuehacktoberfesthelp-wanted
Source: GitHub repository metadata.
Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.
- Language
- Python
- Licence
- MIT
- Stars
- 391
- Last push
- 2026-11-01
- Indexed
- 2026-11-08
clidata-loss-preventiondocument-securitylocal-firstmetadataofficepdfpii-detection
Source: GitHub repository metadata.
No repository description was provided.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 0
- Last push
- 2025-08-29
- Indexed
- 2026-11-08
agentic-aiai-securitycode-analysisdependency-scanningmcpmcp-securitymcp-serversecret-detection
Source: GitHub repository metadata.
A Rust CLI that scans for secrets, PII, and sensitive data — with native hooks for AI coding assistants to prevent leaking credentials into AI context.
- Language
- Rust
- Licence
- MIT
- Stars
- 6
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
ai-toolsclideveloper-toolspii-detectionrustsecret-scanningsecrets-detection
Source: GitHub repository metadata.
sofagent is an open-source FDE Harness for AI coding agents — on entry, write your business judgment into files (workflows, ontology, AI nodes); after departure, audit every change against them. 28 codified audit rules, tamper-evident chain, snapshots, and an MCP toolset (104 tools, 12 plugins). Everything can be FDEing.
- Language
- TypeScript
- Licence
- MIT
- Stars
- 55
- Last push
- 2026-11-05
- Indexed
- 2026-11-08
agent-auditagent-governanceai-agentsai-engineeringai-safetyai-securitycode-auditcompliance
Source: GitHub repository metadata.
Offline-first security scanner for Git changes: secret detection, SAST, SCA, AI/IaC rules, and GitHub CI reports.
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 2
- Last push
- 2026-11-07
- Indexed
- 2026-11-08
ai-securitycybersecuritydependency-scanningdevsecopsgitgithub-actionsiacoffline-first
Source: GitHub repository metadata.
Keeps secrets and PII out of the cloud model. Hook plugin for Claude Code/Codex with a local vault.
- Language
- Python
- Licence
- Apache-2.0
- Stars
- 8
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
agent-skillsclaude-codeclaude-code-plugincodex-pluginpiiprivacyredactionsecret-scanning
Source: GitHub repository metadata.
DSH 本机安全审计插件:配置/插件来源/会话/网络暴露面,只读脱敏风险报告
- Language
- TypeScript
- Licence
- MIT
- Stars
- 17
- Last push
- 2026-09-10
- Indexed
- 2026-11-08
auditdshdsh-pluginsecret-scanningsecurity
Source: GitHub repository metadata.
Free Claude Code plugin that scans your project for leaked API keys, security holes, and common mistakes before you ship. No security expertise needed.
- Language
- Not specified
- Licence
- MIT
- Stars
- 14
- Last push
- 2026-04-05
- Indexed
- 2026-11-08
ai-securityapi-key-leakclaude-codeclaude-code-plugincode-reviewdeveloper-toolsdevtoolsmobile-security
Source: GitHub repository metadata.
Open Source ASPM Platform
- Language
- TypeScript
- Licence
- AGPL-3.0
- Stars
- 18
- Last push
- 2025-09-07
- Indexed
- 2026-11-08
application-securityappsecaspmattack-surface-managementcybersecuritygitleaksinformation-securitynuclei
Source: GitHub repository metadata.
Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.
- Language
- TypeScript
- Licence
- Apache-2.0
- Stars
- 1,079
- Last push
- 2026-11-08
- Indexed
- 2026-11-08
agent-skillsai-agentsai-code-reviewclaude-codeclaude-code-pluginclaude-skillsclinecode-quality
Source: GitHub repository metadata.
Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 19
- Last push
- 2026-07-21
- Indexed
- 2026-11-08
credential-exposurecredentialsdata-exfiltrationdfirdigital-forensicsexfiltrationforensicsgolang
Source: GitHub repository metadata.
Deterministic repo scanner (OSV.dev advisories, secret patterns, config checks) as a single Python file + composite GitHub Action. By Feldspar, an autonomous AI agent.
- Language
- Python
- Licence
- MIT
- Stars
- 1
- Last push
- 2026-10-24
- Indexed
- 2026-11-08
ai-agentcode-securitydependency-scanninggithub-actionsmcpmcp-servermodel-context-protocolosv
Source: GitHub repository metadata.
Fast, zero-dependency redaction of secrets & PII from text and logs — in pure Rust.
- Language
- Rust
- Licence
- Apache-2.0
- Stars
- 25
- Last push
- 2026-10-06
- Indexed
- 2026-11-08
api-keysclicredit-carddata-protectionibanjwtlog-redactionlogging
Source: GitHub repository metadata.