Top 21 Go secret-management Projects

trufflehog

1 32 18,903 9.8 Go

Find, verify, and analyze leaked credentials

Project mention: Ask HN: What are you working on? (April 2025) | news.ycombinator.com | 2025-04-27

Will monitor your progress
Also be interesting to see what trufflehog finds (should be false positive)
https://github.com/trufflesecurity/trufflehog
CodeRabbit

coderabbit.ai featured

CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
sops

2 159 18,323 9.5 Go

Simple and flexible tool for managing secrets

Project mention: Kubernetes GitOps with FluxCD - Part 2 - Secret Management using SOPS | dev.to | 2025-03-20
openbao

3 17 3,691 9.8 Go

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

Project mention: OpenBao v2.1.0 | news.ycombinator.com | 2024-12-02

The combination of paginated list (last release) and transactions (this release) are a wonderful improvement over HashiCorp Vault. They're already paying dividends with potentials to implement much-requested Vault features like list filtering (https://github.com/openbao/openbao/issues/769), recursive keys (https://github.com/openbao/openbao/issues/549) and more.
ots

4 5 1,791 0.0 Go

🔐 Share end-to-end encrypted secrets with others via a one-time URL
berglas

5 40 1,259 5.6 Go

A tool for managing secrets on Google Cloud

Project mention: Generating images with Gemini 2.0 Flash from Google | dev.to | 2025-04-07

If saving locally, Python developers can also choose to save it to .env instead of settings.py but would have to add use of the python-dotenv package to more closely mirror working in a Node.js environment. There's also the GCP Secret Manager as yet another option. Regardless of which technique you use, review the suggestions in the sidebar below to protect it!
argocd-vault-plugin

6 9 875 6.0 Go

An Argo CD plugin to retrieve secrets from Secret Management tools and inject them into Kubernetes secrets
onepassword-operator

7 4 565 4.9 Go

The 1Password Connect Kubernetes Operator provides the ability to integrate Kubernetes Secrets with 1Password. The operator also handles autorestarting deployments when 1Password items are updated.
InfluxDB

influxdata.com featured

InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.
cocert

8 4 203 0.0 Go

Split and distribute your private keys securely amongst untrusted network
scrt

9 3 161 4.5 Go

A command-line secret manager for developers, sysadmins, and devops.

Project mention: Scrt: A command-line secret manager for developers | news.ycombinator.com | 2024-10-31
kube-secrets-init

10 4 155 0.9 Go

Kubernetes mutating webhook for `secrets-init` injection
harp

11 7 150 6.7 Go

Secret management by contract toolchain (by elastic)
lockgit

12 1 129 0.0 Go

A CLI tool for storing encrypted data in a git repo
murmur

13 3 123 3.7 Go

Pass secrets as environment variables to a process (by busser)
k8s-vault-webhook

14 3 116 0.0 Go

A k8s vault webhook is a Kubernetes webhook that can inject secrets into Kubernetes resources by connecting to multiple secret managers
helm-teller

15 5 73 0.0 Go

Allows you to manage configuration and secrets from multiple provider while masking the secrets at the deployment
terraform-provider-lastpass

16 1 60 0.0 Go

Terraform Lastpass provider
env-vault

17 3 42 5.5 Go

Launch a program with environment variables populated from an encrypted file
nv

18 1 34 7.3 Go

A .env loader with secret manager integration (by maxnorth)
shielded-secrets

19 1 22 7.8 Go

Updating secrets simplified!
git-secrets

20 1 14 0.0 Go

a cli tool to manage and deploy configurations and secrets across multiple environments all stored inside your repository (by benammann)
joao

21 1 5 5.2 Go

A very wip configuration manager. Keeps config entries encoded as YAML in the filesystem, backs it up to 1Password, and syncs scrubbed copies to git. robots consume entries via 1Password Connect + Vault.
SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Go secret-management discussion

Go secret-management related posts

IBM Planning to Acquire HashiCorp

5 projects | news.ycombinator.com | 23 Apr 2024
Teller: Universal secret manager, never leave your terminal to use secrets

5 projects | news.ycombinator.com | 17 Jan 2024
How do you handle sensitive variables with a service-worker?

1 project | /r/Firebase | 11 Dec 2023
OpenBao – FOSS Fork of HashiCorp Vault

8 projects | news.ycombinator.com | 8 Dec 2023
Secure GitHub Actions by pull_request_target

5 projects | dev.to | 23 Oct 2023
Need Help with Deploying Directus on Google Cloud Platform (GCP)

1 project | /r/googlecloud | 26 May 2023
Has anyone been able to implement the OpenAI API with a Firebase Function (which is needed for the env variable API Key)?

1 project | /r/OpenAI | 17 May 2023
A note from our sponsor - InfluxDB
influxdata.com | 29 Apr 2025

Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems. Learn more →

Index

What are some of the best open-source secret-management projects in Go? This list will help you:

#	Project	Stars
1	trufflehog	18,903
2	sops	18,323
3	openbao	3,691
4	ots	1,791
5	berglas	1,259
6	argocd-vault-plugin	875
7	onepassword-operator	565
8	cocert	203
9	scrt	161
10	kube-secrets-init	155
11	harp	150
12	lockgit	129
13	murmur	123
14	k8s-vault-webhook	116
15	helm-teller	73
16	terraform-provider-lastpass	60
17	env-vault	42
18	nv	34
19	shielded-secrets	22
20	git-secrets	14
21	joao	5