A tool for secrets management, encryption as a service, and privileged access management

Loads environment variables from .env for nodejs projects.

Find, verify, and analyze leaked credentials

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

a better dotenv–from the creator of `dotenv`

🔓 🔓 Find secrets and passwords in container images and file systems 🔓 🔓

Cloud native secrets management for developers - never leave your command line for secrets.

A system for distributing and managing secrets

Keep passwords and other sensitive information out of your inboxes and chat logs.

Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

A helm plugin that help manage secrets with Git workflow and store them anywhere

transparently encrypt files within a git repository

A collection of tools to perform searches on GitHub.

Vulnerable app with examples showing how to not use secrets

Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.

Custom Kubernetes controller that can be used to replicate secrets, configmaps and certificates.