78 repos across 4 sub-areas
Tools and libraries for identifying security vulnerabilities, secrets, misconfigurations, and code quality issues across applications and infrastructure. The cluster spans multiple domains—static analysis, dependency scanning, secret detection, web security, and infrastructure scanning—with a heavy emphasis on Python and Go implementations. You'll find both specialized scanners (like noseyparker for secrets, gosec for Go code, zizmor for Terraform) and broader security platforms that integrate multiple detection techniques.
Secret Detection & Data Leak Prevention
34 repos
Tools and systems for detecting exposed credentials, API keys, and sensitive data in code repositories, CI/CD pipelines, and version control history. The cluster spans multiple implementations—primarily Go-based scanners like gitleaks and trufflehog that catch secrets before they're committed, complemented by Python and TypeScript utilities for integration, analysis, and DevSecOps workflows. Whether embedded in pre-commit hooks, CI systems, or run as standalone auditors, these projects address the core problem of preventing accidental leakage of authentication tokens and other secrets into public or shared repositories.
Security Testing & Reconnaissance Tools
33 repos
Python, Go, and shell-based utilities for penetration testing, vulnerability scanning, and network reconnaissance. The cluster spans automated security assessment tools (like RustScan for port scanning and Web-Cache-Vulnerability-Scanner) alongside broader reconnaissance frameworks (reconftw, favirecon) that help security researchers and penetration testers gather intelligence and identify weaknesses in systems and web applications.
Secrets management and access control
8 repos
Tools and platforms for securely storing, managing, and controlling access to sensitive credentials, API keys, and secrets across infrastructure and applications. The cluster spans secret vaults, policy engines, CLI tools for secret distribution, and authentication/authorization frameworks—with particular emphasis on PostgreSQL-backed backends and infrastructure-as-code integration. Includes both foundational libraries and complete management platforms serving development and operations teams.
Cluster 462173
3 repos