PyPI
GitGuardian/ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
MITAug 13, 2026 · metrics 2.10.0
All tags
Catalogue tag
#secrets-detection
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
15 records
PyPI · crates.io · npm
hashgraph-online/hol-guard
Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go · Maven
praetorian-inc/titus
High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
betterleaks/betterleaks
Find leaked secrets everywhere.
MITAug 20, 2026 · metrics 2.10.0
PyPI
jimmy058910/jmo-security-repo
JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance
Custom licenseJul 31, 2026 · metrics 2.10.0
Go · npm · PyPI
ShieldNet-360/prompt-gate
Prompt Gate — privacy-first, on-device DLP for the AI era. Blocks unauthorized AI tools at the DNS layer and inspects content sent to approved tools for secrets/PII, entirely on-device.
MITSep 6, 2026 · metrics 2.10.0
PyPI
cpeoples/ansible-security-scanner
🛡️ Static security scanner (SAST) for Ansible playbooks, roles, and collections. 1,000+ rules across 30+ categories detecting malicious code, RCE, hardcoded credentials, and supply-chain risk. Outputs SARIF, CycloneDX SBOM, and GitLab SAST. SLSA Build Level 3, Sigstore-signed.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
Go
draugr-dev/draugr
Developer-first security scanning orchestration — describe your app in one file, run many scanners (SAST, SCA, secrets, IaC, containers, headers), get one SARIF verdict for CI & code scanning.
Apache-2.0Jul 19, 2026 · metrics 2.10.0
npm · Go
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
MITJul 27, 2026 · metrics 2.10.0
Go
cc1a2b/JShunter
jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive data, such as API endpoints and potential security vulnerabilities, making it an essential resource for and bug bounty hunters and security researchers.
MITSep 6, 2026 · metrics 2.10.0
Go
docker/portcullis
A tiny Go library to detect and redact API tokens, cloud credentials, and other secret material in arbitrary text.
Apache-2.0Aug 6, 2026 · metrics 2.10.0
crates.io
kahramanemir/Vallum
Security boundary CLI proxy between AI coding agents and your shell — redacts secrets, neutralizes prompt injection, wraps untrusted terminal output, and audits every command. Single Rust binary.
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go · PyPI
Zayan-Mohamed/secscan
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
MITJul 20, 2026 · metrics 2.10.0
Go
malandas/andas
Sift real security risk from the noise — a cross-platform CLI that live-validates leaked secrets and reachability-ranks npm/Yarn vulnerabilities, so you fix what's actually exploitable.
MITAug 6, 2026 · metrics 2.10.0
npm · Go
rezen/confessecrets
📿 🙏 A secret scanner for structured [conf]iguration files that gets your configs to spill their guts
MITJul 20, 2026 · metrics 2.10.0