SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python Secret Projects
-
secrets-patterns-db
Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
-
Kargo
Stop Scripting Promotions. Start Shipping with Kargo. Kargo automates promotion across dev, staging, and prod with approval gates and verification. Open source, built by the team behind Argo CD. Download now.
-
gh-action-pypi-publish
The blessed :octocat: GitHub Action, for publishing your :package: distribution files to PyPI, the tokenless way: https://github.com/marketplace/actions/pypi-publish
-
tartufo
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
-
-
deadshot
Deadshot is a Github pull request scanner to identify sensitive data being committed to a repository
-
promptmask
Never give AI companies your secrets! A local LLM-based privacy filter for LLM users. Seamless integration with your existing AI tools as a Python library / OpenAI SDK replacement / API Gatetway / Web Server.
-
shotstars
An advanced tool for checking GitHub repositories, with star statistics, including fake star analysis and data visualization.
-
AppSignal
Monitoring that respects your time & budget. APM, error tracking, and dashboards for modern web apps. Ten-minute setup, transparent flat pricing, and support from engineers who actually use the product.
-
-
-
-
ggmcp
MCP server for remediating hardcoded secrets using GitGuardian’s API. It detects over 600 secret types and prevents credential leaks before code is made public.
Project mention: Unified Secrets Security with GitGuardian and AWS Secrets Manager | dev.to | 2026-08-17A GitGuardian account and API credentials (sign up at GitGuardian)
-
-
awesome-ai-coding-sandboxes
Security-posture-first list of sandboxes for running AI coding agents' code, ranked by isolation, egress control and secrets handling
Project mention: A list of sandboxes for running AI coding agents, ranked by security posture | news.ycombinator.com | 2026-08-03 -
-
vaultscan-community
Privacy-first secret leak detection tool for DevOps and security teams. Built for scalable, offline-first scanning with future enterprise expansion plans.
-
leakproof
Local secret firewall for AI coding assistants (Claude Code/Cursor/aider) — scans + redacts secrets before anything leaves the machine. Local-first, zero cloud. MIT.
Project mention: leakproof: stop your AI coding tool from leaking secrets to the cloud (local, Apache-2.0) | dev.to | 2026-06-17Author here. The problem leakproof targets: AI coding tools (Claude Code, Cursor, aider) ship a lot of working-tree context upstream, and if any of it contains a secret — an .env value, a key in a fixture, a token in a comment — it can leave before you notice. That's a big reason compliance-bound teams end up banning these tools. leakproof is a local proxy between the tool and the model API: outbound requests get scanned and redacted before they leave the machine. Nothing calls home — no cloud account, the audit log stays local. There's also a git pre-commit gate. You can check it out at https://github.com/acunningham-ship-it/leakproof and I'll anwser any questions below.
-
-
-
-
envlockr-cli
Local-first encrypted secrets CLI — OS-keychain key storage, run-with-secrets injection, and API key liveness checks. No cloud, no account.
Project mention: EnvLockr – local secrets CLI that tells you which stored API keys are still live | news.ycombinator.com | 2026-07-30 -
-
secret-time-machine
Scans your entire git history for secrets — finds API keys you deleted 2 years ago
Project mention: Secret-time-machine: scan your Git history for secrets you deleted years ago | news.ycombinator.com | 2026-03-09- Works fully offline — no data leaves your machine
pip install secret-time-machine && stm scan ./your-repo
GitHub: https://github.com/LakshmiSravyaVedantham/secret-time-machin...
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Python Secrets discussion
Python Secrets related posts
-
Unified Secrets Security with GitGuardian and AWS Secrets Manager
-
whoimports: who still imports this Python module?
-
Shifting Security Left for AI Agents: Enforcing AI-Generated Code Security with GitGuardian MCP
-
Secret-time-machine: scan your Git history for secrets you deleted years ago
-
GitHub - boringtools/git-alerts: A Public Git repository
-
GitHub - boringtools/git-alerts: A Public Git repository & misconfiguration detection tool
-
A Public Git repository and misconfiguration detection tool
-
A note from our sponsor - SaaSHub
www.saashub.com | 8 Sep 2026
Index
What are some of the best open-source Secret projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | secrets-patterns-db | 1,601 |
| 2 | gh-action-pypi-publish | 1,183 |
| 3 | tartufo | 515 |
| 4 | leaky-repo | 249 |
| 5 | deadshot | 192 |
| 6 | promptmask | 148 |
| 7 | shotstars | 116 |
| 8 | pyaml_env | 99 |
| 9 | noseyparker-explorer | 58 |
| 10 | keyrings.cryptfile | 43 |
| 11 | ggmcp | 37 |
| 12 | secrets-vault | 26 |
| 13 | awesome-ai-coding-sandboxes | 20 |
| 14 | bipsea | 8 |
| 15 | vaultscan-community | 8 |
| 16 | leakproof | 5 |
| 17 | Stegocrypt-GUI | 4 |
| 18 | footprint-otp | 4 |
| 19 | securo | 3 |
| 20 | envlockr-cli | 3 |
| 21 | Envault | 2 |
| 22 | secret-time-machine | 1 |
| 23 | eyesonly | 1 |