Top 23 Secret Open-Source Projects

• gitleaks

  35 15,225 8.2 Go

  Protect and discover secrets using Gitleaks 🔑

  

Project mention: How to use Lefthooks in your node project? | dev.to | 2024-04-11

install gitleaks in your machine gitleaks

• trufflehog

  25 13,907 9.9 Go

  Find and verify secrets

  

Project mention: Seeking help to identify vulnerabilities and secrets in a website backup file | /r/HowToHack | 2023-07-03

Trufflehog

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• shhgit

  7 3,788 0.0 JavaScript

  Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.

• WordPress-Android

  2 2,916 10.0 Kotlin

  WordPress for Android

  

• talisman

  5 1,836 6.8 Go

  Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.

  

Project mention: Detecting Secrets in Git Repositories | /r/kubernetes | 2023-07-07

It's been a while since I looked, but pre-commit hooks (like talisman) would be the only way to prevent secrets from being committed/pushed. Server-side hooks are generally not supported on hosted repos (e.g. github, azure devops) since it's basically arbitrary code execution from the host's perspective.

• envchain

  3 1,139 0.0 C

  Environment variables meet macOS Keychain and gnome-keyring <3

• go-keyring

  2 748 4.7 Go

  Cross-platform keyring interface for Go

  

Project mention: Storing secrets in distributed binaries? | /r/golang | 2023-05-07

If it is a personal application you can use the operating systems keyring. E.g. with https://github.com/zalando/go-keyring

• WorkOS

  workos.com featured

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• secretlint

  7 698 9.4 TypeScript

  Pluggable linting tool to prevent committing credential.

  

Project mention: GitHub Sponsors: azu the Japanese TypeScript and JavaScript developer | dev.to | 2024-04-25

Azu created 500+ npm packages, wrote and maintains a number of popular command line tools for JavaScript. textlint has 2,751 stars, Secretlint has 698 stars. honkit for building books has 2,896 stars.

• Hemmelig.app

  26 641 8.9 JavaScript

  Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

  

Project mention: Hemmelig: Paste a password, confidential message, or private data | news.ycombinator.com | 2024-04-23

• vault-secrets-operator

  5 610 8.0 Go

  Create Kubernetes secrets from Vault for a secure GitOps based workflow.

• Stegano

  3 481 7.8 Python

  A pure Python steganography module.

• VaultSharp

  1 476 0.0 C#

  A comprehensive cross-platform .NET Library for HashiCorp's Vault, a secret management tool

Project mention: Ask HN: Grep.app Alternative? | news.ycombinator.com | 2024-04-09

https://grep.app/ has served me well for the last couple of years finding snippets for random APIs.

But recently I found that certain strings from open-source projects suddenly yield no results.

For example: VaultServiceTimeout from https://github.com/rajanadar/VaultSharp has no results for https://grep.app/search?q=VaultServiceTimeout.

Is there some alternative service for this task that is up-to-date?

• hidden-secrets-gradle-plugin

  1 379 1.0 Kotlin

  🔒 Deeply hide secrets on Android

  

• FlashPaper

  7 318 6.1 PHP

  One-time encrypted password/secret sharing

Project mention: FlashPaper: One-time encrypted password/secret sharing | news.ycombinator.com | 2024-02-26

• vault-csi-provider

  1 291 7.9 Go

  HashiCorp Vault Provider for Secret Store CSI Driver

  

• lockgit

  1 127 0.0 Go

  A CLI tool for storing encrypted data in a git repo

• HiddenCamera

  0 124 0.0 Kotlin

  📸 A library that allows you to capture images in background without displaying UI.

  

• synator

  4 115 0.0 Python

  Synator Kubernetes Secret and ConfigMap synchronizer

• Fugacious

  0 110 0.0 Ruby

  OSSSM (awesome). Open source short-term secure messaging

  

• ksd

  1 92 10.0 Go

  kubernetes secret decoder

• breaking-telegram

  18 83 4.8 Python

  Simple PoC script that allows you to exploit telegram's "send with timer" feature by saving any media sent with this functionality.

• safecloset

  12 84 5.7 Rust

  Cross-platform Secure TUI Secret Locker

• lade

  4 78 7.4 Rust

  Automatically load secrets from your preferred vault as environment variables or files, and clear them once your shell command is over.

Project mention: Show HN: Metatype – an open-source, low-code API platform for developers | news.ycombinator.com | 2023-05-17

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Secret related posts

• GitHub Sponsors: azu the Japanese TypeScript and JavaScript developer

  3 projects | dev.to | 25 Apr 2024

• Hemmelig: Paste a password, confidential message, or private data

  1 project | news.ycombinator.com | 23 Apr 2024

• Web-app solution to store messages behind a password?

  4 projects | /r/selfhosted | 10 Jul 2023

• Detecting Secrets in Git Repositories

  2 projects | /r/kubernetes | 7 Jul 2023

• Seeking help to identify vulnerabilities and secrets in a website backup file

  1 project | /r/HowToHack | 3 Jul 2023

• My boss keeps committing his creds into git

  6 projects | /r/devops | 24 May 2023

• 1 in 10 developers leaked an API-key in 2022

  3 projects | news.ycombinator.com | 27 May 2023
• A note from our sponsor - WorkOS
  workos.com | 30 Apr 2024

  The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com