Yelp / detect-secretsLinks
An enterprise friendly way of detecting and preventing secrets in code.
☆4,095Updated 2 months ago
Alternatives and similar repositories for detect-secrets
Users that are interested in detect-secrets are comparing it to the libraries listed below
Sorting:
- Vulnerability Static Analysis for Containers☆10,652Updated this week
- Find secrets with Gitleaks 🔑☆20,083Updated this week
- Tfsec is now part of Trivy☆6,827Updated this week
- Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resour…☆5,676Updated last week
- Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.☆1,847Updated this week
- Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.☆7,669Updated this week
- Bandit is a tool designed to find common security issues in Python code.☆7,027Updated this week
- Find, verify, and analyze leaked credentials☆19,353Updated last week
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,306Updated this week
- A vault for securely storing and accessing AWS credentials in development environments☆8,744Updated 10 months ago
- Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and priva…☆1,999Updated this week
- Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.☆3,894Updated 3 months ago
- Multi-Cloud Security Auditing Tool☆7,173Updated 6 months ago
- Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more☆26,955Updated last week
- Terraform Pull Request Automation☆8,283Updated this week
- OpenSSF Scorecard - Security health metrics for Open Source☆4,914Updated last week
- Vulnerability scanner written in Go which uses the data provided by https://osv.dev☆7,442Updated this week
- Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view powere…☆3,404Updated this week
- CLI tool that finds secrets accidentally committed to a git repo, eg passwords, private keys☆1,163Updated 2 years ago
- Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supp…☆3,083Updated this week
- Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.☆7,341Updated last week
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆11,728Updated last week
- A vulnerability scanner for container images and filesystems☆9,924Updated this week
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆7,069Updated this week
- Open-source cloud-environment inspector. Supporting AWS, GCP, Azure, and more! Your cloud resources will have nowhere to hide!☆4,056Updated 2 months ago
- A service that analyzes docker images and scans for vulnerabilities☆1,587Updated 2 years ago
- Prevents you from committing secrets and credentials into git repositories☆12,766Updated last year
- InSpec: Auditing and Testing Framework☆2,920Updated this week
- StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environme…☆2,871Updated last year
- Detect, track and alert on infrastructure drift☆2,548Updated last month