AI-powered secret scanner for code and git history. Finds leaked API keys, tokens and credentials with near-zero false positives by pairing Rényi entropy detection with LLM adjudication. Runs as a CLI, pre-commit hook, GitHub Action, MCP server or Claude Code hook. Single Go binary, MIT licensed.
- Language
- Go
- Licence
- MIT
- Stars
- 11
- Last push
- 2026-10-03
- Indexed
- 2026-11-08
aiapi-keysappsecclaude-codeclicredentialsdevsecopsgithub-actions
Source: GitHub repository metadata.
No repository description was provided.
- Language
- Python
- Licence
- Not specified
- Stars
- 0
- Last push
- 2026-03-25
- Indexed
- 2026-11-08
clidependency-scanningdevsecopsdevtoolsmalware-detectionpypipythonsecurity
Source: GitHub repository metadata.
Deterministic safety gates for repositories touched by coding agents and automation.
- Language
- Shell
- Licence
- MIT
- Stars
- 7
- Last push
- 2026-11-01
- Indexed
- 2026-11-08
agent-securitygithub-cliprompt-injectionsecret-scanningsupply-chain-security
Source: GitHub repository metadata.
Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.
- Language
- Python
- Licence
- MIT
- Stars
- 1,809
- Last push
- 2026-11-03
- Indexed
- 2026-11-08
ai-penetration-testingai-pentestingai-securityappsecbug-bountyclaudectfcybersecurity
Source: GitHub repository metadata.
This is a step-by-step guide to implementing a DevSecOps program for any size organization
- Language
- Not specified
- Licence
- GPL-3.0
- Stars
- 2,058
- Last push
- 2024-12-21
- Indexed
- 2026-11-08
devsecopsplaybooksecurity
Source: GitHub repository metadata.
Github Action for getting all the details about the current Pull Request if the commit is part of one
- Language
- TypeScript
- Licence
- GPL-3.0
- Stars
- 128
- Last push
- 2026-01-28
- Indexed
- 2026-11-08
automationci-cdgithub-actiongithub-actionsjavascriptpull-requestsworkflow
Source: GitHub repository metadata.
Docker image to export Godot Engine games. Templates for Gitlab CI and GitHub Actions to deploy to GitLab Pages/GitHub Pages/Itch.io.
- Language
- Dockerfile
- Licence
- MIT
- Stars
- 1,153
- Last push
- 2026-10-20
- Indexed
- 2026-11-08
ci-cddockerdockerfilegithub-actionsgithub-pagegithub-pagesgitlabgitlab-ci
Source: GitHub repository metadata.
FastAPI + Redis distributed job pipeline used to demo GitLab CI/CD test automation and MR-integrated vulnerability scanning.
- Language
- Python
- Licence
- MIT
- Stars
- 2
- Last push
- 2026-09-11
- Indexed
- 2026-11-08
cicdcircuit-breakercontainer-securitydependency-scanningdevsecopsfastapigithub-actionsgitlab-ci
Source: GitHub repository metadata.
Unix and Linux system administration handbook by Evi Nemeth Garth Snyder Trent R. Hein Ben Whaley Dan Mackin
- Language
- Shell
- Licence
- Not specified
- Stars
- 492
- Last push
- 2025-03-23
- Indexed
- 2026-11-08
centosci-cddebiandevopsdockerfreebsdlinuxredhat
Source: GitHub repository metadata.
Security scanning and mitigation lab for a Flask DevSecOps app: SAST with Bandit and Semgrep, SCA with Safety and pip-audit, DAST with OWASP ZAP, plus fixes and re-scans.
- Language
- Not specified
- Licence
- Not specified
- Stars
- 0
- Last push
- 2026-10-26
- Indexed
- 2026-11-08
banditcybersecuritydastdependency-scanningdevsecopsflaskowasp-zappip-audit
Source: GitHub repository metadata.
Next-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass
- Language
- Go
- Licence
- MIT
- Stars
- 28
- Last push
- 2026-10-01
- Indexed
- 2026-11-08
bugbountycybersecuritydirectory-scannerfuzzerfuzzinggogolangpentesting
Source: GitHub repository metadata.
macOS endpoint scanner for static credential exposure and supply chain attack indicators
- Language
- Python
- Licence
- MIT
- Stars
- 6
- Last push
- 2026-08-27
- Indexed
- 2026-11-08
credentialsdevsecopsenvironment-variablesscanningsecret-managementsecret-scanningsecurity-toolssupply-chain-security
Source: GitHub repository metadata.
An advanced secret scanning tool designed to identify sensitive information, such as API keys and tokens within your given urls.
- Language
- HTML
- Licence
- MIT
- Stars
- 6
- Last push
- 2025-10-08
- Indexed
- 2026-11-08
clicli-toolcyber-securitycyber-security-projectcybersecurityprojectssecretsecret-scanner
Source: GitHub repository metadata.
CLI that screens PyPI/npm dependencies for typosquats before you install - risk scoring, JSON output for CI, cleaned manifest.safe
- Language
- Python
- Licence
- MIT
- Stars
- 0
- Last push
- 2026-07-26
- Indexed
- 2026-11-08
clidependency-scanningdevsecopsnpmpypipythonsupply-chain-securitytyposquatting
Source: GitHub repository metadata.
The Kubernetes Continuous Integration & Delivery Platform (CI/CD) :arrows_counterclockwise:
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 116
- Last push
- 2016-07-08
- Indexed
- 2026-11-08
cici-cdcontinuous-deliverycontinuous-integrationkubernetes
Source: GitHub repository metadata.
RedFlag uses AI to identify high-risk code changes. Run it in batch mode for release candidate testing or in CI pipelines to flag PRs and add reviewers. RedFlag's flexible configuration makes it valuable for any team.
- Language
- Jinja
- Licence
- MIT
- Stars
- 163
- Last push
- 2026-05-22
- Indexed
- 2026-11-08
aici-cdcode-reviewsecuritysecurity-auditsecurity-automationsecurity-tools
Source: GitHub repository metadata.
Zero-input AI security audit for any codebase - a Claude Code skill + Python core that hunts leaked API keys, IDOR, billing bypass, prompt injection, and vulnerable/malicious deps, then ships a VAPT-grade report with SARIF/JSON output.
- Language
- Python
- Licence
- MIT
- Stars
- 2
- Last push
- 2026-09-06
- Indexed
- 2026-11-08
ai-agentsclaudeclaude-codeclidependency-scanningdevsecopsllm-securitypenetration-testing
Source: GitHub repository metadata.
A curated list of awesome GitHub Advanced Security secret scanning resources.
- Language
- PowerShell
- Licence
- MIT
- Stars
- 18
- Last push
- 2026-10-29
- Indexed
- 2026-11-08
awesomeawesome-listgithub-advanced-securitysecret-scanning
Source: GitHub repository metadata.
GitHub Secret Scanning Auto Remediator (GSSAR)
- Language
- TypeScript
- Licence
- MIT
- Stars
- 51
- Last push
- 2026-09-03
- Indexed
- 2026-11-08
awsgithubjavascriptremediationsecret-scanningtypescript
Source: GitHub repository metadata.
Automate GitHub secret protection custom patterns
- Language
- TypeScript
- Licence
- MIT
- Stars
- 6
- Last push
- 2026-10-05
- Indexed
- 2026-11-08
advanced-securitycustom-patternsghasghspsecret-protectionsecret-scanningsecrets-detection
Source: GitHub repository metadata.
What this index tells you
We collect selected public repository metadata through GitHub’s official API and store it on our server. This is not a complete index of GitHub. Categories come from discovery queries and topics; a “skills” or “plugins” result is not a verified installation format. We do not run or audit the projects listed here.
Check the original repository’s licence, installation instructions and maintenance history before using it. Stars do not establish security, and a recent push does not prove that a project works. GitHub may have newer information than our last indexed record.
Search is lexical, not an AI answer engine. Short words and spelling differences can affect matches. This site is independent of GitHub. Report a wrong category, stale result or removal request.