Top 12 Rust Secret Projects
-
Project mention: Dear friend, you have built a Kubernetes (2024) | news.ycombinator.com | 2026-04-26
Service discovery is basically just Docker's internal DNS. Caddy-docker-proxy can use it to find healthy upstreams.
For secrets, I self-host Infisical on the box -- easy to plug in whatever secret manager, should make it pair nicely with https://github.com/tellerops/teller or something similar
Had no problems with Hertzner so far, just enjoying the raw CPU power of bare metal. The plan is to roll out more boxes across different providers, using Tailscale for the backplane network and Cloudflare to load-balance between them. All in due time What issues have you been having ?
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
kingfisher
Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 1,000+ rules. (by mongodb)
Project mention: GitHub Actions issued GitHub_TOKEN disclosure in GitHub Actions logs | news.ycombinator.com | 2026-05-13This is also a good reminder to scan CI logs, not just source code.
Shameless plug: I work on Kingfisher, an Apache 2.0 OSS secret scanner and validator written in Rust, that can also map blast radius and revoke many creds:
<https://github.com/mongodb/kingfisher>
It can scan repos, history, and artifacts and validate many findings against provider APIs, as well as revoke many exposed tokens directly from the CLI. Also generates a blast-radius/access-map view so you can see what a leaked credential could reach.
Install:
brew install kingfisher -
Project mention: Scrt: A CLI secret manager for developers, sysadmins and DevOps | news.ycombinator.com | 2026-03-12
-
KeyHunter
Fast Rust scanner to find leaked API keys on GitHub - OpenAI, Anthropic, Claude, GPT, AWS, Stripe, HuggingFace + 45 providers. Verify active secrets instantly.
-
-
-
cloak
Local vault for AI agents. Use API keys without exposing raw stored keys to the model. (by cloakward)
Project mention: Show HN: Cloak – let AI agents use your API keys without ever seeing them | news.ycombinator.com | 2026-06-21 -
Project mention: Show HN: Axo Pass – Unlock SSH/GPG Keys and Secrets with Touch ID on macOS | news.ycombinator.com | 2025-12-08
-
Project mention: Show HN: Keynest – a simple offline secrets manager | news.ycombinator.com | 2026-03-20
-
secretenv
Run any process with secrets from all your backends. No SaaS, no re-encryption, no .env files.
Project mention: Show HN: Secretenv – Run any process with secrets from all your back ends | news.ycombinator.com | 2026-05-05 -
Project mention: Show HN: Git-agecrypt – transparent file-level encryption for Git | news.ycombinator.com | 2026-04-27
-
Project mention: Devdrop – Local-first workspace sync for developers | news.ycombinator.com | 2026-06-22
Rust Secrets discussion
Rust Secrets related posts
Index
What are some of the best open-source Secret projects in Rust? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | teller | 3,227 |
| 2 | kingfisher | 1,199 |
| 3 | securestore-rs | 163 |
| 4 | KeyHunter | 147 |
| 5 | seclip | 45 |
| 6 | JAZ | 23 |
| 7 | cloak | 15 |
| 8 | axo-pass | 13 |
| 9 | keynest | 10 |
| 10 | secretenv | 5 |
| 11 | git-agecrypt | 2 |
| 12 | devdrop | 2 |
Sponsored