Skip to content

Repository search

Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.

Explore topic collections for selection checklists and useful search examples.

Clear filters

141 matching repositories for “secret scanning”.

5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.

Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/

Language
Python
Licence
Apache-2.0
Stars
887
Last push
2026-11-08
Indexed
2026-11-08

ai-agentsai-code-reviewai-generated-codecode-qualitycode-scanningdartdead-codedead-code-detection

Source: GitHub repository metadata.

Local base-URL gateway that redacts secrets and PII before they leave your machine

Language
Go
Licence
Apache-2.0
Stars
7
Last push
2026-10-10
Indexed
2026-11-08

ai-securityai-toolsclaude-codecodexdlpgatewaygolangllm-security

Source: GitHub repository metadata.

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Language
Python
Licence
MIT
Stars
2,013
Last push
2026-11-06
Indexed
2026-11-08

apikeycodecredentialsdevsecopskeyleakprecommitscanning

Source: GitHub repository metadata.

Static security scanner and linter for GitLab CI. Finds .gitlab-ci.yml misconfigurations, supply-chain risks, and leaked secrets. Offline, SARIF output, OWASP CICD-SEC and CWE mappings.

Language
Go
Licence
Apache-2.0
Stars
25
Last push
2026-11-07
Indexed
2026-11-08

appsecci-cd-securitycicddevopsdevsecopsgitlabgitlab-cigo

Source: GitHub repository metadata.

Multi-cloud xSPM platform to scan, visualize, and remediate security risks across cloud, containers, and Kubernetes environments.

Language
TypeScript
Licence
Not specified
Stars
10
Last push
2025-11-27
Indexed
2026-11-08

aws-securityciemcloudcloud-securitycloudsecuritycompliance-checkscontainer-securitycspm

Source: GitHub repository metadata.

Convert any DevOps Pipeline into 8-gate DevSecOps Pipeline with just 10 lines of YAML code - secrets, SAST, SBOM, signing. 100% OSS, free.

Language
Shell
Licence
Not specified
Stars
8
Last push
2026-08-22
Indexed
2026-11-08

ci-cdcontainer-securitycontinuous-integrationcosigndevsecopsgithub-actionsgithub-actions-ciopen-source

Source: GitHub repository metadata.

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Language
Python
Licence
MIT
Stars
88
Last push
2026-11-03
Indexed
2026-11-08

ai-agentsclaude-codeclideveloper-toolsdlpgood-first-issuehacktoberfesthelp-wanted

Source: GitHub repository metadata.

Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.

Language
Python
Licence
MIT
Stars
391
Last push
2026-11-01
Indexed
2026-11-08

clidata-loss-preventiondocument-securitylocal-firstmetadataofficepdfpii-detection

Source: GitHub repository metadata.

No repository description was provided.

Language
TypeScript
Licence
MIT
Stars
0
Last push
2025-08-29
Indexed
2026-11-08

agentic-aiai-securitycode-analysisdependency-scanningmcpmcp-securitymcp-serversecret-detection

Source: GitHub repository metadata.

A Rust CLI that scans for secrets, PII, and sensitive data — with native hooks for AI coding assistants to prevent leaking credentials into AI context.

Language
Rust
Licence
MIT
Stars
6
Last push
2026-11-08
Indexed
2026-11-08

ai-toolsclideveloper-toolspii-detectionrustsecret-scanningsecrets-detection

Source: GitHub repository metadata.

sofagent is an open-source FDE Harness for AI coding agents — on entry, write your business judgment into files (workflows, ontology, AI nodes); after departure, audit every change against them. 28 codified audit rules, tamper-evident chain, snapshots, and an MCP toolset (104 tools, 12 plugins). Everything can be FDEing.

Language
TypeScript
Licence
MIT
Stars
55
Last push
2026-11-05
Indexed
2026-11-08

agent-auditagent-governanceai-agentsai-engineeringai-safetyai-securitycode-auditcompliance

Source: GitHub repository metadata.

Offline-first security scanner for Git changes: secret detection, SAST, SCA, AI/IaC rules, and GitHub CI reports.

Language
Python
Licence
Apache-2.0
Stars
2
Last push
2026-11-07
Indexed
2026-11-08

ai-securitycybersecuritydependency-scanningdevsecopsgitgithub-actionsiacoffline-first

Source: GitHub repository metadata.

Keeps secrets and PII out of the cloud model. Hook plugin for Claude Code/Codex with a local vault.

Language
Python
Licence
Apache-2.0
Stars
8
Last push
2026-11-08
Indexed
2026-11-08

agent-skillsclaude-codeclaude-code-plugincodex-pluginpiiprivacyredactionsecret-scanning

Source: GitHub repository metadata.

DSH 本机安全审计插件:配置/插件来源/会话/网络暴露面,只读脱敏风险报告

Language
TypeScript
Licence
MIT
Stars
17
Last push
2026-09-10
Indexed
2026-11-08

auditdshdsh-pluginsecret-scanningsecurity

Source: GitHub repository metadata.

Free Claude Code plugin that scans your project for leaked API keys, security holes, and common mistakes before you ship. No security expertise needed.

Language
Not specified
Licence
MIT
Stars
14
Last push
2026-04-05
Indexed
2026-11-08

ai-securityapi-key-leakclaude-codeclaude-code-plugincode-reviewdeveloper-toolsdevtoolsmobile-security

Source: GitHub repository metadata.

Open Source ASPM Platform

Language
TypeScript
Licence
AGPL-3.0
Stars
18
Last push
2025-09-07
Indexed
2026-11-08

application-securityappsecaspmattack-surface-managementcybersecuritygitleaksinformation-securitynuclei

Source: GitHub repository metadata.

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.

Language
TypeScript
Licence
Apache-2.0
Stars
1,079
Last push
2026-11-08
Indexed
2026-11-08

agent-skillsai-agentsai-code-reviewclaude-codeclaude-code-pluginclaude-skillsclinecode-quality

Source: GitHub repository metadata.

Open-source, offline forensic scanner CLI tool designed to detect evidence of git repo collection or upload by the Grok Build CLI to xAI infrastructure.

Language
Go
Licence
Apache-2.0
Stars
19
Last push
2026-07-21
Indexed
2026-11-08

credential-exposurecredentialsdata-exfiltrationdfirdigital-forensicsexfiltrationforensicsgolang

Source: GitHub repository metadata.

Deterministic repo scanner (OSV.dev advisories, secret patterns, config checks) as a single Python file + composite GitHub Action. By Feldspar, an autonomous AI agent.

Language
Python
Licence
MIT
Stars
1
Last push
2026-10-24
Indexed
2026-11-08

ai-agentcode-securitydependency-scanninggithub-actionsmcpmcp-servermodel-context-protocolosv

Source: GitHub repository metadata.

Fast, zero-dependency redaction of secrets & PII from text and logs — in pure Rust.

Language
Rust
Licence
Apache-2.0
Stars
25
Last push
2026-10-06
Indexed
2026-11-08

api-keysclicredit-carddata-protectionibanjwtlog-redactionlogging

Source: GitHub repository metadata.

What this index tells you

We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.

Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.

Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.