Secret Detection

nvidia/skillspector

Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…

awslabs/git-secrets

Prevents you from committing secrets and credentials into git repositories

s0md3v/photon

Incredibly fast crawler designed for OSINT.

google/osv-scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

agwa/git-crypt

Transparent file encryption in git

bridgecrewio/checkov

Static analysis tool for infrastructure as code that detects cloud misconfigurations, vulnerabilities, and secrets across Terraform, Kubernetes,…

bee-san/pywhat

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…

vercel-labs/deepsec

Agent-powered vulnerability scanner for large-scale codebases. Uses LLMs to find hard-to-detect security issues via regex matchers and AI…

streaak/keyhacks

Curated collection of commands to validate leaked API keys from bug bounty programs and penetration tests, covering 80+ services including AWS,…

dwisiswant0/apkleaks

Scanning APK file for URIs, endpoints & secrets.

michenriksen/gitrob

Reconnaissance tool for GitHub organizations

zizmorcore/zizmor

Static analysis tool for CI/CD systems that detects and fixes security issues in GitHub Actions, Dependabot, and pre-commit configurations, including…

snyk/cli

Snyk CLI scans and monitors your projects for security vulnerabilities.

ossf/scorecard

OpenSSF Scorecard - Security health metrics for Open Source

devsecops/awesome-devsecops

An authoritative list of awesome devsecops tools with the help from community experiments and contributions.

deepfence/threatmapper

Open Source Cloud Native Application Protection Platform (CNAPP)

yelp/detect-secrets

An enterprise friendly way of detecting and preventing secrets in code.