Search Results for "secrets"
Sort By:
Showing 62 open source projects for "secrets"
View related business solutions-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
External Secrets
External Secrets Operator reads information from a third-party service
External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Conjur, Pulumi ESC and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret. -
2
Sealed Secrets for Kubernetes
A Kubernetes controller and tool for one-way encrypted Secrets
Sealed Secrets provides declarative Kubernetes Secret Management in a secure way. Since the Sealed Secrets are encrypted, they can be safely stored in a code repository. This enables an easy-to-implement GitOps flow that is very popular among the OSS community. Sealed Secrets offers a powerful CLI tool (kubeseal) to one-way encrypt your Kubernetes Secret easily. -
3
AWS Secrets Manager Go Caching Client
Enables in-process caching of secrets for Go applications
The AWS Secrets Manager Go caching client enables in-process caching of secrets for Go applications. To use this client you must have a Go development environment. If you do not have one, go to Golang Getting Started on The Go Programming Language website, then download and install Go. An Amazon Web Services (AWS) account to access secrets stored in AWS Secrets Manager and use AWS SDK for Go. -
4
Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet, and DeploymentConfig – [✩Star] if you're using it. We would like to watch if some change happens in ConfigMap and/or Secret; then perform a rolling upgrade on relevant DeploymentConfig, Deployment, Daemonset, Statefulset, and Rollout. Reloader can watch changes in ConfigMap and Secret and do rolling upgrades on Pods with their associated DeploymentConfigs, Deployments, Daemonsets Statefulsets, and Rollouts. -
Veeam Data Platform v13.1Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
5
AWS Secrets Manager JDBC Library
The AWS Secrets Manager JDBC Library for Java developers
The AWS Secrets Manager JDBC Library enables Java developers to easily connect to SQL databases using secrets stored in AWS Secrets Manager. We provide database drivers that intercept calls to real database drivers and swap out secret IDs for actual login credentials. This prevents hard-coding database credentials into your application code. This can be integrated into your app through a few configuration file changes. -
6
Valet
Valet lets you securely store data in the iOS, tvOS, or macOS Keychain
...Choose an identifier that describes the kind of data your Valet will protect. You do not need to include your application name or bundle identifier in your Valet’s identifier. The Accessibility enum is used to determine when your secrets can be accessed. It’s a good idea to use the strictest accessibility possible that will allow your app to function. -
7
Talisman
Talisman validates the outgoing changeset
Talisman is a tool that installs a hook to your repository to ensure that potential secrets or sensitive information do not leave the developer's workstation. It validates the outgoing changeset for things that look suspicious - such as potential SSH keys, authorization tokens, private keys etc. Talisman can also be used as a repository history scanner to detect secrets that have already been checked in, so that you can take an informed decision to safeguard secrets. ... -
8
Semgrep
Lightweight static analysis for many languages
...Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities. Don't leak secrets, scan every commit and ensure secrets don't make it to production. Protect the privileged CI/CD environment from malicious activity that could result in access to source code, secrets, and more. Run with registry rules or your own. Code is analyzed locally (not uploaded). Get results at ludicrous speed with diff-aware scans, review findings in MR and PR comments, and deploy Semgrep across your organization’s projects. ... -
9
dotenvx
A secure dotenv–from the creator of `dotenv`
...Designed by the creator of the classic dotenv library, dotenvx preserves the familiar workflow while adding safeguards against one of the biggest risks with plain environment files: plaintext secrets exposure. It offers CLI commands that can encrypt and decrypt .env files, inject environment variables at runtime, and support conventions like layered environment file loading similar to Next.js or dotenv-flow. Beyond basic runtime usage, dotenvx includes tooling for key management, listing .env files in structured views, and operations like variable rotation and scoped overrides, bringing more robust secrets handling to modern app stacks. -
Train ML Models With SQL You Already KnowBuild and deploy ML models using familiar SQL. Automate data prep with built-in Gemini. Query 1 TB and store 10 GB free monthly.
-
10
bearer
Code security scanning tool (SAST) to discover security risks
...Usage of weak encryption libraries or misusage of encryption algorithms. Unencrypted incoming and outgoing communication (HTTP, FTP, SMTP) of sensitive information. Non-filtered user input. Hard-coded secrets and tokens. Bearer currently supports JavaScript and Ruby stacks, more will follow. Bearer's scanners and reports are your path to analyzing security risks and vulnerabilities in your application. -
11
Argo CD Image Updater
Automatic container image update for Argo CD
Argo CD Image Updater is a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD. In a nutshell, it will track image versions specified by annotations on the Argo CD Application resources and update them by setting parameter overrides using the Argo CD API. Currently, it will only work with applications that are built using Kustomize or Helm tooling. Applications built from plain YAML or custom tools are not supported yet (and maybe never... -
12
Atlas
A modern tool for managing database schemas
...The atlas migrate command provides a state-of-the-art experience for planning, linting, and applying migrations. Atlas integrates with standard cloud services and provides an easy way to read secrets from cloud providers such as AWS Secrets Manager and GCP Secret Manager. -
13
ggshield
Detect and validate 500+ types of hardcoded secrets
GitGuardian’s ggshield is an open-source command-line interface (CLI) tool designed to help developers and security teams detect hardcoded secrets and sensitive credentials early in the development process, either locally or in CI/CD pipelines. It scans source code, configuration files, commit history, and other artifacts to automatically detect hundreds of different secret types — such as API keys, tokens, and passwords — helping prevent accidental leaks before they reach version control or production environments. ggshield can be used interactively on a developer’s machine, integrated as a pre-commit or pre-push git hook, and run as part of automated build or merge workflows to enforce security policies consistently across teams. ... -
14
Bank-Vaults
CLI tool to init, unseal and configure Vault
...It has a CLI tool to automatically initialize, unseal, and configure Vault. It also provides a Kubernetes operator for provisioning, and a mutating webhook for injecting secrets. -
15
Cloudflare Workers SDK
Home to Wrangler, the CLI for Cloudflare Workers
...It contains the command-line tooling, templates, local development environment, testing utilities, and build pipelines that integrate with the Workers runtime, so developers can write code in JavaScript, TypeScript, and other languages and push functions to Cloudflare’s edge network with minimal configuration. Wrangler enables developers to scaffold new projects, manage bindings (like KV, Durable Objects, and Secrets), preview code locally or remotely, and finally publish updates to production with a single command. The monorepo also includes tooling for simulating the Cloudflare runtime locally using Workerd, helping catch environment-specific bugs before deployment. -
16
Swarmpit
Lightweight mobile-friendly Docker Swarm management UI
Swarmpit is an open-source, self-hosted web dashboard that simplifies Docker Swarm cluster operations. It offers management of stacks, services, secrets, volumes, networks, and allows secure team access. It visualizes real-time CPU/memory/disk metrics, supports private registry integration, and streamlines deployment flows. The interface is mobile-friendly and privacy-focused—collecting no telemetry. -
17
Gitleaks
Protect and discover secrets using Gitleaks
Gitleaks is a fast, lightweight, portable, and open-source secret scanner for git repositories, files, and directories. With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action. You can use it to automatically run a gitleaks scan on all your team's pull... -
18
Akamai Application Platform (for LKE)
App Platform for Linode Kubernetes Engine
apl-core is the open source heart of Akamai’s App Platform for Linode Kubernetes Engine, packaging a curated set of Kubernetes building blocks into a turnkey “platform engineering” layer. Instead of assembling ingress, certificates, GitOps, secrets, and observability by hand, you install a single Helm chart and get a consistent, production-oriented baseline on LKE or any conformant Kubernetes cluster. The project provides a guided path after installation, post-install setup, and hands-on labs, so teams can go from a fresh cluster to shipping services with guardrails in place. ... -
19
Supabase CLI
Supabase CLI. Manage postgres migrations, run Supabase locally
Supabase CLI is the command-line interface for managing and developing Supabase projects. It streamlines local development, database migrations, environment management, and project deployment. Designed for developers building with Supabase, the CLI provides an efficient way to work with the entire Supabase stack—PostgreSQL, auth, storage, and edge functions—directly from the terminal. -
20
Yaak
The most intuitive desktop API client
...The application is built using Tauri, Rust, and React, which contributes to its lightweight footprint, high performance, and cross-platform compatibility. One of its core design principles is being offline-first, meaning that user data, requests, and secrets are stored locally without reliance on cloud services, enhancing both privacy and control. Yaak also emphasizes developer productivity by offering features such as dynamic request templating, debugging tools, and environment-based configuration management. -
21
Keyshade
Realtime secret and configuration management tool
Keyshade is an open-source secret and configuration management platform designed to keep environment variables, API keys, and runtime configuration synchronized across local development, CI/CD, and production. It helps teams avoid hardcoding secrets or manually sharing .env files by providing a centralized system for securely storing and distributing configuration values. The platform uses public key encryption with elliptic curve cryptography to protect secrets while they are stored and transferred. It is built for developers, infrastructure teams, and modern engineering workflows that need secure collaboration without slowing down deployment. ... -
22
Lab
Get up and running with Jenkins on Google Kubernetes Engine
...The project leverages Google Kubernetes Engine to manage containerized applications and uses Jenkins pipelines to define and execute build and deployment processes declaratively. It illustrates how to deploy applications using Kubernetes primitives such as deployments, services, ingress, and secrets, enabling scalable and resilient microservices architectures. The repository also highlights best practices such as GitOps workflows, automated rollouts, and secure credential management within CI/CD pipelines. -
23
GitHub Pages Deploy Action
Automatically deploy your project to GitHub Pages using GitHub Actions
...If you intend to make multiple deployments in quick succession you may need to leverage the concurrency parameter in your workflow to prevent overlaps. The with portion of the workflow must be configured before the action will work. You can add these in the with section found in the examples above. Any secrets must be referenced using the bracket syntax and stored in the GitHub repository's Settings/Secrets menu. -
24
Convoy
The Cloud Native Webhooks Gateway
...It supports both outgoing and incoming webhook use cases, making it useful for API providers as well as teams consuming external webhooks. Convoy also includes operational features such as circuit breaking, rolling secrets, static IP support, and delivery controls. It is best suited for SaaS platforms, internal platform teams, and developers building webhook-heavy products. -
25
Obfuscar
Open source obfuscation tool for .NET assemblies
Obfuscar is an open-source .NET obfuscator released under MIT license. It provides basic obfuscation features that help secure secrets in a .NET assembly. An obfuscation tool designed for most .NET developers. Hide everything private, while keep everything public. You can achieve such simply via default settings. Hide class/method/property/event names that you don't want to expose. This is irreversible. String contents can be compressed so that end users won't easily learn them. ...
