Alternatives and similar repositories for github-secrets:

Users that are interested in github-secrets are comparing it to the libraries listed below

• nikitastupin / pwnhub
  How GitHub Actions workflows can be hacked
  ☆119Updated 5 months ago
• AdnaneKhan / Gato-X
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆239Updated this week
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆112Updated this week
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆190Updated last month
• controlplaneio / truffleproc
  truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
  ☆114Updated last year
• nccgroup / web3-decoder
  ☆111Updated 2 years ago
• RichardoC / gitlab-secrets
  This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…
  ☆45Updated 6 months ago
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆270Updated 2 weeks ago
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆216Updated last month
• Aqua-Nautilus / CVE-Half-Day-Watcher
  ☆289Updated 6 months ago
• WithSecureLabs / damn-vulnerable-llm-agent
  ☆197Updated last year
• nullenc0de / ChromeAudit
  Nuclei plugins to audit Chrome extensions
  ☆63Updated 7 months ago
• trailofbits / semgrep-rules
  Semgrep queries developed by Trail of Bits.
  ☆383Updated last month
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆153Updated 5 months ago
• DataDog / undocumented-aws-api-hunter
  A tool to uncover undocumented APIs from the AWS Console.
  ☆95Updated 3 months ago
• trufflesecurity / how-to-rotate
  An open-source collection of API key rotation tutorials.
  ☆63Updated 2 months ago
• The-Login / DNS-Analysis-Server
  Tools to assess DNS security.
  ☆151Updated 11 months ago
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆132Updated last year
• padok-team / cognito-scanner
  A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation
  ☆102Updated last year
• praetorian-inc / gato
  GitHub Actions Pipeline Enumeration and Attack Tool
  ☆584Updated this week
• kulkansecurity / gitxray
  A multifaceted security tool which leverages Public GitHub REST APIs for OSINT, Forensics, Pentesting and more.
  ☆124Updated this week
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆92Updated 8 months ago
• nccgroup / ccs
  ☆109Updated last year
• mschwager / route-detect
  Find authentication (authn) and authorization (authz) security bugs in web application routes.
  ☆256Updated 7 months ago
• chebuya / sastsweep
  tool designed for identifying vulnerabilities in open source codebases at scale. It can gather and filter on key repository metrics such …
  ☆214Updated 2 weeks ago
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆163Updated 5 months ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆21Updated 4 months ago
• SunWeb3Sec / Kubernetes-security
  Kubernetes pentesting, hardening and hunting tools.
  ☆62Updated 2 years ago
• DataDog / HASH
  HASH (HTTP Agnostic Software Honeypot)
  ☆136Updated 9 months ago
• spaceraccoon / ogp-ctf-2024
  A web CTF for training developers in bug hunting and secure coding!
  ☆93Updated last month