PyPI · crates.io
GitGuardian/ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
MIT17 sept 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#secrets-detection
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
25 registros
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.022 oct 2026 · métricas 2.10.0
PyPI · Go
awslabs/ferret-scan
Find and redact sensitive data before it leaks — a fast, offline CLI and Go library that detects PII, secrets, and credentials in files and streams, scores them with context-aware confidence, and redacts them format-preserving. Nothing leaves your host.
Apache-2.010 sept 2026 · métricas 2.10.0
PyPI · crates.io
duriantaco/skylos
Open source local-first PR scanner that finds dead code, security bugs, secrets, quality regressions, and AI-code mistakes before merge. For first timers refer to https://duriantaco.github.io/skylos/repo-map/
Apache-2.015 sept 2026 · métricas 2.10.0
Go · Maven
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Apache-2.011 sept 2026 · métricas 2.10.0
PyPI · npm
Aletheore/Aletheore
Evidence-grounded repository audit CLI - deterministic scanner, MCP server, live dashboard, and a GitHub Action that posts PR diffs.
Licencia propia27 sept 2026 · métricas 2.10.0
Go
betterleaks/betterleaks
Find leaked secrets everywhere.
MIT19 oct 2026 · métricas 2.10.0
PyPI
jimmy058910/jmo-security-repo
JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance
Licencia propia15 sept 2026 · métricas 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.09 sept 2026 · métricas 2.10.0
PyPI · npm · crates.io
redact-secret/redact-secret
Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.
MIT10 oct 2026 · métricas 2.10.0
Go · npm · PyPI
ShieldNet-360/prompt-gate
Prompt Gate — privacy-first, on-device DLP for the AI era. Blocks unauthorized AI tools at the DNS layer and inspects content sent to approved tools for secrets/PII, entirely on-device.
MIT6 sept 2026 · métricas 2.10.0
crates.io
censgate/redact
Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.
Apache-2.019 sept 2026 · métricas 2.10.0
Go
draugr-dev/draugr
Run Trivy, Semgrep, Gitleaks and more from one file. Consolidates SAST, SCA, secrets, IaC and container findings into one SARIF report and one pass/fail gate for CI — ranked by real risk, and can fail a PR on new findings only.
Apache-2.011 sept 2026 · métricas 2.10.0
npm · PyPI
sinewaveai/agent-security-scanner-mcp
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
MIT9 oct 2026 · métricas 2.10.0
npm · Go
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
MIT14 sept 2026 · métricas 2.10.0
Go
docker/portcullis
A tiny Go library to detect and redact API tokens, cloud credentials, and other secret material in arbitrary text.
Apache-2.017 sept 2026 · métricas 2.10.0
npm
vaultcompasshq/conductor
Umbrella installer and combined report over the independently installable guardrail gates
MIT14 sept 2026 · métricas 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MIT6 sept 2026 · métricas 2.10.0
crates.io
kahramanemir/Vallum
Security boundary CLI proxy between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, wraps untrusted terminal output, and audits every command. Single Rust binary.
Apache-2.06 sept 2026 · métricas 2.10.0
PyPI
spark1security/n0s1
Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab
GPL-3.019 sept 2026 · métricas 2.10.0
Go
varalys/redactyl
Deep artifact scanner for cloud-native environments. Find secrets hiding in container images, Helm charts, Kubernetes manifests, and nested archives.
Apache-2.019 sept 2026 · métricas 2.10.0
Go · PyPI
Zayan-Mohamed/secscan
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
MIT12 sept 2026 · métricas 2.10.0
Go · npm
rezen/confessecrets
📿 🙏 A secret scanner for structured [conf]iguration files that gets your configs to spill their guts
MIT12 sept 2026 · métricas 2.10.0
Go
malandas/andas
Sift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.
MIT17 sept 2026 · métricas 2.10.0
Go
sanks205/getobserver
Finds what's wrong — and shows you the fix. Code, deps, config & infra — one offline scan, one report.
MIT18 sept 2026 · métricas 2.10.0