Budget-aware context compiler for coding agents - scan, grade, spark-test and pour a hard-budget context pack
ai-agentsclicoding-agentscompressioncontext-engineeringdeveloper-toolsllmranking
Source: GitHub repository metadata.
Repository search
Find public projects in our local index, with related guides and tools from MetaCyberGuru. Your search is not sent to GitHub.
Explore topic collections for selection checklists and useful search examples.
141 matching repositories for “secret scanning”.
5,477 indexed in total. Latest successful discovery check: 2026-11-08 09:40:22 UTC.
Practical, continuously verified open-source DevSecOps tools and a tested CI/CD security pipeline for GitHub Actions, covering SBOM, SAST, SCA, secrets, containers, and signing.
appsecawesomeawesome-listci-cdcontainer-securitydevopsdevsecopsgithub-actions
Source: GitHub repository metadata.
Multi-scanner security orchestration for DevSecOps. Container vulnerabilities, SBOMs, secrets, malware, and policy in one dashboard.
container-securitydevsecopsdjangodockergrypenextjssbomsecret-scanning
Source: GitHub repository metadata.
Scan AI-generated git diffs for secrets, deleted tests, risky CI permissions, and prompt/config drift before commit.
ai-codingclicode-reviewdeveloper-toolsdevsecopsdiff-analysisgitgithub-actions
Source: GitHub repository metadata.
collectvars collects JavaScript variables, highlights risky ones, and helps you understand code structure, while you casually browse.
application-securitybugbountybugbounty-toolchrome-extensioninfosecjavascriptpentestingsecret-scanning
Source: GitHub repository metadata.
Find credentials your coding agent already sent. Scans local Claude Code and Codex transcripts against the gitleaks rule set. No network, no telemetry, zero dependencies.
ai-agentsclaude-codeclicodexcredentialsdevsecopsgitleakssecret-scanning
Source: GitHub repository metadata.
Local Chrome extension for finding patterns associated with credentials and sensitive values exposed in web pages.
chrome-extensionjavascriptsecret-scanningsecurity
Source: GitHub repository metadata.
AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.
anthropicbrowser-extensionchatgptclaudecodexdata-protectionllmllm-privacy
Source: GitHub repository metadata.
Pre-AI repo sanitization. Redact secrets before your code meets the LLM.
ai-securityclidevsecopspii-detectionredactionsecret-scanning
Source: GitHub repository metadata.
Local-first blue-team security platform. Scans code, secrets, dependencies, and databases in isolated local sandboxes, verifies fixes, and opens PRs to GitHub.
appsecblue-teamcybersecuritydatabase-securitydocker-sandboxiac-securitylocal-firstpull-requests
Source: GitHub repository metadata.
Fast, cross-platform CLI for finding secrets and sensitive data across filesystems, SMB, Active Directory, Microsoft 365, Slack, Jira and Confluence.
active-directorycliconfluencecross-platformdata-discoveryfilesystemjiramicrosoft-365
Source: GitHub repository metadata.
Zero-config deployment automation — push a project folder straight to GitHub and deploy it to Vercel or Render, with AI-powered build diagnostics.
ai-poweredci-cddeployment-automationdeveloper-toolsdevopsexpressgithub-apinodejs
Source: GitHub repository metadata.
A lightweight, cross-platform CLI tool that scans your filesystem to detect exposed secrets, API keys, and tokens. Built with Go for maximum performance and zero dependencies.
audit-toolclicredential-scannercybesecuritydevsecopsgogolanginfosec
Source: GitHub repository metadata.
Find and scrub secrets from AI coding agent session logs and configs: Claude Code, Codex, Gemini CLI, aider, Cursor and more
ai-agentsclaude-codeclicodexdeveloper-toolsrustsecret-scanningsecrets-detection
Source: GitHub repository metadata.
Language-agnostic software supply-chain security scanner covering 28 ecosystems. Detects malicious packages, suspicious code, install-time threats, secrets and AI-agent security risks before execution
ai-agent-securityapplication-securityci-cd-securitycontainer-securitydependency-scanninginfrastructure-as-codemalware-analysismalware-detection
Source: GitHub repository metadata.
Scan for secrets in dangling commits on GitHub using GH Archive data.
dangling-commitsforce-pushgharchivesecret-scanningsecrets
Source: GitHub repository metadata.
Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.
burp-extensionsburpsuitesecret-scanningsecretssecrets-detectiontrufflehog
Source: GitHub repository metadata.
Charter is an offline-first AI-agent-readiness scanner for software repositories. It audits agent context, MCP safety, reproducibility, CI posture, and governance so teams can safely adopt coding agents without guesswork.
ai-agentsclaude-codeclicode-qualitycoding-assistantcursordeveloper-toolsdevsecops
Source: GitHub repository metadata.
MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permissions and invalid MCP servers in Claude Code, Cursor and VS Code (Copilot) configs. Local-first CLI, no telemetry.
ai-agentsai-securityclaude-codeclicursordeveloper-toolsdevsecopsgithub-copilot
Source: GitHub repository metadata.
Local-first security for developers and their AI coding agents. Finds risky agent settings (hooks, auto-approve, unpinned MCP servers), API keys leaked into agent chats, and OS weaknesses, then fixes them. Single-file CLI and desktop app for Linux, macOS and Windows. No telemetry.
ai-agentsclamavclaude-codeclidesktop-apphardeninginfoseclinux
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.