GitHub stars · StarDay

1hashicorp / vaultA tool for secrets management, encryption as a service, and privileged access managementGoLicense not declared36,473

2Infisical / infisicalInfisical is the open-source platform for securing secrets, certificates, access, and AI Agents.TypeScriptLicense not declared30,316

3trufflesecurity / trufflehogFind, verify, and analyze leaked credentialsGoAGPL-3.0 · Share derivative source28,917

4motdotla / dotenvLoads environment variables from .env for nodejs projects.JavaScriptBSD-2-Clause · Permissive20,560

5drduh / YubiKey-GuideCommunity guide to using YubiKey for GnuPG and SSH - protect secrets with hardware crypto.HTMLMIT · Permissive13,067

6stakater / ReloaderA Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!GoApache-2.0 · Permissive10,549

7superdesigndev / tregOpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAnPythonLicense not declared7,314

8dotenvx / dotenvxa secure dotenv—from the creator of `dotenv`JavaScriptBSD-3-Clause · Permissive5,875

9eth0izzle / shhgitAh shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.JavaScriptMIT · Permissive3,993

10deepfence / SecretScanner:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:GoMIT · Permissive3,396

11tellerops / tellerCloud native secrets management for developers - never leave your command line for secrets.RustApache-2.0 · Permissive3,238

12betterleaks / betterleaksFind leaked secrets everywhere.GoMIT · Permissive2,826

13jkroepke / helm-secretsA helm plugin that help manage secrets with Git workflow and store them anywhereShellApache-2.0 · Permissive2,038

14elasticdog / transcrypttransparently encrypt files within a git repositoryShellMIT · Permissive1,711

15drduh / pwd.shManage secrets with Bash and GnuPG symmetric encryptionShellMIT · Permissive1,564

16OWASP / wrongsecretsVulnerable app with examples showing how to not use secretsHTMLAGPL-3.0 · Share derivative source1,475

17ricoberger / vault-secrets-operatorCreate Kubernetes secrets from Vault for a secure GitOps based workflow.GoMIT · Permissive686

18drduh / PurseManage secrets with Bash and GnuPG asymmetric encryption (YubiKey)ShellMIT · Permissive616

19algolia / sup3rS3cretMes5ageSimple to use, simple to deploy, one time self destruct messaging service, with hashicorp vault as a backendGoMIT · Permissive571

20Keeper-Security / CommanderKeeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.PythonMIT · Permissive260