Top 23 secrets-management Open-Source Projects

• shhgit

  7 3,787 0.0 JavaScript

  Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

• SecretScanner

  7 2,950 7.3 Go

  :unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

  

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• portable-secret

  11 1,664 3.1 HTML

  Better privacy without special software

Project mention: Ask HN: Best practices for safeguarding master password in organization? | news.ycombinator.com | 2023-09-26

Something like [0] maybe?

[0]: https://mprimi.github.io/portable-secret/

• ggshield

  22 1,522 9.7 Python

  Find and fix 360+ types of hardcoded secrets and 70+ types of infrastructure-as-code misconfigurations.

  

• helm-secrets

  12 1,280 8.4 Shell

  A helm plugin that help manage secrets with Git workflow and store them anywhere

Project mention: Simplified Deployment: A Deep Dive into Containerization and Helm | dev.to | 2023-10-09

helm plugin install https://github.com/databus23/helm-diff helm plugin install https://github.com/aslafy-z/helm-git helm plugin install https://github.com/jkroepke/helm-secrets

• berglas

  37 1,223 6.9 Go

  A tool for managing secrets on Google Cloud

  

Project mention: How to deploy a Django app to Google Cloud Run using Terraform | dev.to | 2024-01-01

Secret Manager: secure storage for sensitive data e.g passwords.

• wrongsecrets

  3 1,110 9.8 Java

  Vulnerable app with examples showing how to not use secrets

  

Project mention: How to Not Use Secrets | news.ycombinator.com | 2023-12-03

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• dotenv-vault

  9 1,003 8.6 TypeScript

  sync .env files—from the creator of `dotenv`.

  

Project mention: Node.js 20.6 adds built-in support for .env files | dev.to | 2024-04-12

dotenv-vault is another popular package that lets you encrypt your secret and decrypt the file just in time. They are quite helpful for production and CIT environments but are not supported currently.

• envkey

  9 586 7.0 TypeScript

  Simple, end-to-end encrypted configuration and secrets management

  

Project mention: Show HN: Envkey-VSCode – Autocomplete/type-checking for env vars in 46 languages | news.ycombinator.com | 2023-06-21

envkey-vscode is a VSCode extension that provides autocomplete, type checking, and peek-on-hover for environment variables in 46 different programming languages. Instead of a typeless, error-prone blob, the environment now acts like a strongly-typed object in every language you work in.

I’ve been using this extension myself for a couple weeks now and it feels like a pretty significant upgrade to my development workflow, especially when working on integrations across multiple languages, so I thought it was worth showing you all.

envkey-vscode relies on EnvKey, an open-source, end-to-end encrypted configuration and secrets manager that is focused on security and ease-of-use. It’s cross-platform, can integrate with any language or host, and can be cloud-hosted or self-hosted. Getting a project integrated normally takes a couple minutes.

More on EnvKey: https://www.envkey.com

Building and testing it has been an interesting process, as I relied quite heavily on ChatGPT/GPT-4 to cover languages that I’m not very familiar with. It helped me to develop regexes to cover the common forms of environment access in each language, as well as to produce small test cases and Dockerfiles that can run them. While it took a lot of passes and tweaking to root out hallucinations and get each language right, I don’t think there’s any way I could have built a tool like this in a reasonable amount of time. Having a single `test` command that runs examples in dozens of languages is pretty amazing—sort of like a rudimentary version of Replit that runs locally.

All the code for the extension lives in EnvKey’s monorepo here: https://github.com/envkey/envkey/tree/main/public/sdks/tools...

I’m planning to write up a blog post on this process and what I’ve learned about how to get the most out of GPT on a polyglot coding project like this. If you’re interested, you can sign up to get notified here when this post is live: https://envkey.us15.list-manage.com/subscribe?u=623039cd8518...

• agebox

  1 199 0.0 Go

  Age based repository file encryption gitops tool

• vault

  2 182 4.1 Python

  Python password manager (by gabfl)

• esc

  1 182 9.1 Go

  Pulumi ESC (Environments, Secrets, and Configuration) for cloud applications and infrastructure. (by pulumi)

  

Project mention: Taming secrets and configuration sprawl – Pulumi ESC | news.ycombinator.com | 2023-10-12

• kube-secrets-init

  4 147 3.9 Go

  Kubernetes mutating webhook for `secrets-init` injection

  

• vals-operator

  4 111 5.7 Go

  Kubernetes Operator to sync secrets between different secret backends and Kubernetes

  

• terraform-aws-ssm-parameter-store

  1 102 4.3 HCL

  Terraform module to populate AWS Systems Manager (SSM) Parameter Store with values from Terraform. Works great with Chamber.

  

• ansible-onepasswordconnect-collection

  2 101 7.7 Python

  The 1Password Connect collection contains modules that interact with your 1Password Connect deployment. The modules communicate with the 1Password Connect API to support Vault Item create/read/update/delete operations.

  

Project mention: Eval command in Ansible | /r/ansible | 2023-05-23

here's a link to the collection's source code which has been updated in the past month or so (at least a small update): https://github.com/1Password/ansible-onepasswordconnect-collection

• solutions

  1 80 8.2 Python

  Examples and templates from the 1Password Solutions team (by 1Password)

  

Project mention: Ask HN: I have 176 logins/accounts. How many do you have? | news.ycombinator.com | 2023-05-21

Definitely a relevant topic, I'd say, especially if the discussion help any stragglers over the "edge" into finally using a password manager. (As far as I'm concerned, it is absolutely a requisite for all digital citizens in 2023.) ((And kinda has been for 10+ years but ya know.))

I'm closing in on 5000 credentials in 1Password, personally, but my collected vaults/database is 15+ years old now and definitely has [problematic duplicates](https://github.com/1Password/solutions/issues/1).

After a lengthy-enough sample of semi-formal self-observation, I'm averaging:

- signing in/authenticating 10 times/day (including weekends,) and most of those are repeats with the same service.

• libvault

  4 74 1.8 Go

  A lightweight Vault client module written in Go, with no dependencies, that is intuitive and user-friendly

• conceal

  3 59 10.0 Go

  A command line utility that provides a secure method to get your secrets from your existing password manager. :lock:

• kubeseal-convert

  1 44 8.6 Go

  A tool for importing secrets from a pre-existing secrets management systems (e.g. Vault, Secrets Manager) into a SealedSecret :shushing_face:

• seclip

  2 37 0.0 Rust

  A CLI utility to secretly copy secrets to clipboard. :lock::memo:

• sicher

  1 31 4.3 Go

  Sicher is a go module that allows secure storage of encrypted credentials in a version control system.

• hush_gcp_secret_manager

  0 18 2.4 Elixir

  A Google Secret Manager Provider for Hush

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

secrets-management related posts

• How do you handle sensitive variables with a service-worker?
  1 project | /r/Firebase | 11 Dec 2023
• Increasing Your Cloud Function Development Velocity Using Dynamically Loading Python Classes
  3 projects | dev.to | 29 Nov 2023
• Getting started using Google APIs: API Keys (Part 2)
  4 projects | dev.to | 16 Nov 2023
• Need some advice on API key storage
  2 projects | /r/reactjs | 23 Oct 2023
• Secure GitHub Actions by pull_request_target
  5 projects | dev.to | 23 Oct 2023
• Ask HN: Best practices for safeguarding master password in organization?
  2 projects | news.ycombinator.com | 26 Sep 2023
• Need Help with Deploying Directus on Google Cloud Platform (GCP)
  1 project | /r/googlecloud | 26 May 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 19 Apr 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com