13 repos
Tools and libraries for detecting, preventing, and managing secrets (API keys, credentials, tokens) in codebases and CI/CD pipelines. The cluster spans multiple languages—primarily Go, Python, and Rust—with mature projects like Gitleaks, TruffleHog, and Noseyparker leading approaches to scanning git history and filesystem artifacts for leaked credentials. These tools address a core DevSecOps concern: preventing accidental exposure of sensitive data before it reaches version control or production systems.