Search Results for "secrets"
Sort By:
Showing 55 open source projects for "secrets"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Veeam Data Platform v13.1Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
1
External Secrets
External Secrets Operator reads information from a third-party service
External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Conjur, Pulumi ESC and many more. The operator reads information from external APIs and automatically injects the values into a Kubernetes Secret. -
2
Sealed Secrets for Kubernetes
A Kubernetes controller and tool for one-way encrypted Secrets
Sealed Secrets provides declarative Kubernetes Secret Management in a secure way. Since the Sealed Secrets are encrypted, they can be safely stored in a code repository. This enables an easy-to-implement GitOps flow that is very popular among the OSS community. Sealed Secrets offers a powerful CLI tool (kubeseal) to one-way encrypt your Kubernetes Secret easily. -
3
AWS Secrets Manager Go Caching Client
Enables in-process caching of secrets for Go applications
The AWS Secrets Manager Go caching client enables in-process caching of secrets for Go applications. To use this client you must have a Go development environment. If you do not have one, go to Golang Getting Started on The Go Programming Language website, then download and install Go. An Amazon Web Services (AWS) account to access secrets stored in AWS Secrets Manager and use AWS SDK for Go. -
4
Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet, and DeploymentConfig – [✩Star] if you're using it. We would like to watch if some change happens in ConfigMap and/or Secret; then perform a rolling upgrade on relevant DeploymentConfig, Deployment, Daemonset, Statefulset, and Rollout. Reloader can watch changes in ConfigMap and Secret and do rolling upgrades on Pods with their associated DeploymentConfigs, Deployments, Daemonsets Statefulsets, and Rollouts. -
Cut Data Warehouse Costs by 54%BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.
-
5
AWS Secrets Manager JDBC Library
The AWS Secrets Manager JDBC Library for Java developers
The AWS Secrets Manager JDBC Library enables Java developers to easily connect to SQL databases using secrets stored in AWS Secrets Manager. We provide database drivers that intercept calls to real database drivers and swap out secret IDs for actual login credentials. This prevents hard-coding database credentials into your application code. This can be integrated into your app through a few configuration file changes. -
6
Talisman
Talisman validates the outgoing changeset
Talisman is a tool that installs a hook to your repository to ensure that potential secrets or sensitive information do not leave the developer's workstation. It validates the outgoing changeset for things that look suspicious - such as potential SSH keys, authorization tokens, private keys etc. Talisman can also be used as a repository history scanner to detect secrets that have already been checked in, so that you can take an informed decision to safeguard secrets. ... -
7
Semgrep
Lightweight static analysis for many languages
...Find and prevent security issues in Terraform, Docker, Kubernetes, nginx, and AWS configs before they go into production. Go beyond application code and protect the entire stack with a breadth of scanning capabilities. Don't leak secrets, scan every commit and ensure secrets don't make it to production. Protect the privileged CI/CD environment from malicious activity that could result in access to source code, secrets, and more. Run with registry rules or your own. Code is analyzed locally (not uploaded). Get results at ludicrous speed with diff-aware scans, review findings in MR and PR comments, and deploy Semgrep across your organization’s projects. ... -
8
Argo CD Image Updater
Automatic container image update for Argo CD
Argo CD Image Updater is a tool to automatically update the container images of Kubernetes workloads which are managed by Argo CD. In a nutshell, it will track image versions specified by annotations on the Argo CD Application resources and update them by setting parameter overrides using the Argo CD API. Currently, it will only work with applications that are built using Kustomize or Helm tooling. Applications built from plain YAML or custom tools are not supported yet (and maybe never... -
9
ggshield
Detect and validate 500+ types of hardcoded secrets
GitGuardian’s ggshield is an open-source command-line interface (CLI) tool designed to help developers and security teams detect hardcoded secrets and sensitive credentials early in the development process, either locally or in CI/CD pipelines. It scans source code, configuration files, commit history, and other artifacts to automatically detect hundreds of different secret types — such as API keys, tokens, and passwords — helping prevent accidental leaks before they reach version control or production environments. ggshield can be used interactively on a developer’s machine, integrated as a pre-commit or pre-push git hook, and run as part of automated build or merge workflows to enforce security policies consistently across teams. ... -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
10
Bank-Vaults
CLI tool to init, unseal and configure Vault
...It has a CLI tool to automatically initialize, unseal, and configure Vault. It also provides a Kubernetes operator for provisioning, and a mutating webhook for injecting secrets. -
11
Swarmpit
Lightweight mobile-friendly Docker Swarm management UI
Swarmpit is an open-source, self-hosted web dashboard that simplifies Docker Swarm cluster operations. It offers management of stacks, services, secrets, volumes, networks, and allows secure team access. It visualizes real-time CPU/memory/disk metrics, supports private registry integration, and streamlines deployment flows. The interface is mobile-friendly and privacy-focused—collecting no telemetry. -
12
Keyshade
Realtime secret and configuration management tool
Keyshade is an open-source secret and configuration management platform designed to keep environment variables, API keys, and runtime configuration synchronized across local development, CI/CD, and production. It helps teams avoid hardcoding secrets or manually sharing .env files by providing a centralized system for securely storing and distributing configuration values. The platform uses public key encryption with elliptic curve cryptography to protect secrets while they are stored and transferred. It is built for developers, infrastructure teams, and modern engineering workflows that need secure collaboration without slowing down deployment. ... -
13
Yaak
The most intuitive desktop API client
...The application is built using Tauri, Rust, and React, which contributes to its lightweight footprint, high performance, and cross-platform compatibility. One of its core design principles is being offline-first, meaning that user data, requests, and secrets are stored locally without reliance on cloud services, enhancing both privacy and control. Yaak also emphasizes developer productivity by offering features such as dynamic request templating, debugging tools, and environment-based configuration management. -
14
Gitleaks
Protect and discover secrets using Gitleaks
Gitleaks is a fast, lightweight, portable, and open-source secret scanner for git repositories, files, and directories. With over 6.8 million docker downloads, 11.2k GitHub stars, 1.7 million GitHub Downloads, thousands of weekly clones, and over 400k homebrew installs, gitleaks is the most trusted secret scanner among security professionals, enterprises, and developers. Gitleaks-Action is our official GitHub Action. You can use it to automatically run a gitleaks scan on all your team's pull... -
15
Cloudflare Workers SDK
Home to Wrangler, the CLI for Cloudflare Workers
...It contains the command-line tooling, templates, local development environment, testing utilities, and build pipelines that integrate with the Workers runtime, so developers can write code in JavaScript, TypeScript, and other languages and push functions to Cloudflare’s edge network with minimal configuration. Wrangler enables developers to scaffold new projects, manage bindings (like KV, Durable Objects, and Secrets), preview code locally or remotely, and finally publish updates to production with a single command. The monorepo also includes tooling for simulating the Cloudflare runtime locally using Workerd, helping catch environment-specific bugs before deployment. -
16
Supabase CLI
Supabase CLI. Manage postgres migrations, run Supabase locally
Supabase CLI is the command-line interface for managing and developing Supabase projects. It streamlines local development, database migrations, environment management, and project deployment. Designed for developers building with Supabase, the CLI provides an efficient way to work with the entire Supabase stack—PostgreSQL, auth, storage, and edge functions—directly from the terminal. -
17
dotenvx
A secure dotenv–from the creator of `dotenv`
...Designed by the creator of the classic dotenv library, dotenvx preserves the familiar workflow while adding safeguards against one of the biggest risks with plain environment files: plaintext secrets exposure. It offers CLI commands that can encrypt and decrypt .env files, inject environment variables at runtime, and support conventions like layered environment file loading similar to Next.js or dotenv-flow. Beyond basic runtime usage, dotenvx includes tooling for key management, listing .env files in structured views, and operations like variable rotation and scoped overrides, bringing more robust secrets handling to modern app stacks. -
18
Akamai Application Platform (for LKE)
App Platform for Linode Kubernetes Engine
apl-core is the open source heart of Akamai’s App Platform for Linode Kubernetes Engine, packaging a curated set of Kubernetes building blocks into a turnkey “platform engineering” layer. Instead of assembling ingress, certificates, GitOps, secrets, and observability by hand, you install a single Helm chart and get a consistent, production-oriented baseline on LKE or any conformant Kubernetes cluster. The project provides a guided path after installation, post-install setup, and hands-on labs, so teams can go from a fresh cluster to shipping services with guardrails in place. ... -
19
GitHub Pages Deploy Action
Automatically deploy your project to GitHub Pages using GitHub Actions
...If you intend to make multiple deployments in quick succession you may need to leverage the concurrency parameter in your workflow to prevent overlaps. The with portion of the workflow must be configured before the action will work. You can add these in the with section found in the examples above. Any secrets must be referenced using the bracket syntax and stored in the GitHub repository's Settings/Secrets menu. -
20
Obfuscar
Open source obfuscation tool for .NET assemblies
Obfuscar is an open-source .NET obfuscator released under MIT license. It provides basic obfuscation features that help secure secrets in a .NET assembly. An obfuscation tool designed for most .NET developers. Hide everything private, while keep everything public. You can achieve such simply via default settings. Hide class/method/property/event names that you don't want to expose. This is irreversible. String contents can be compressed so that end users won't easily learn them. ... -
21
bearer
Code security scanning tool (SAST) to discover security risks
...Usage of weak encryption libraries or misusage of encryption algorithms. Unencrypted incoming and outgoing communication (HTTP, FTP, SMTP) of sensitive information. Non-filtered user input. Hard-coded secrets and tokens. Bearer currently supports JavaScript and Ruby stacks, more will follow. Bearer's scanners and reports are your path to analyzing security risks and vulnerabilities in your application. -
22
dynaconf
Configuration Management for Python
...Optional layered system for multi environments [default, development, testing, production] (also called multi profiles). Built-in support for Hashicorp Vault and Redis as settings and secrets storage. Built-in extensions for Django and Flask web frameworks. CLI for common operations such as init, list, write, validate, export. On your own code you import and use settings object imported from your config.py file. Dynaconf prioritizes the use of environment variables and you can optionally store settings in Settings Files using any of toml|yaml|json|ini|py extension. -
23
podinfo
Go microservice template for Kubernetes
Podinfo is a tiny web application made with Go that showcases the best practices of running microservices in Kubernetes. Podinfo is used by CNCF projects like Flux and Flagger for end-to-end testing and workshops. -
24
Trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers
Trivy is the most popular open source security scanner, reliable, fast, and easy to use. Use Trivy to find vulnerabilities & IaC misconfigurations, SBOM discovery, Cloud scanning, Kubernetes security risks,and more. Trivy is praised by professionals from organizations worldwide. Are you a Trivy fan as well? We’d love to hear from you! Trivy detects vulnerabilities from a wide array of operating systems and programming languages, across different versions, and vulnerability sources. Detect... -
25
Exoframe
A self-hosted tool that allows simple one-command deployment
Exoframe is a self-hosted tool that allows simple one-command deployments using Docker. Simple function deployments. Multiple deployment endpoints and multi-user support. Simple update procedure for client, server and Traefik. Optional automatic subdomain assignment (i.e. every deployment gets its own subdomain). Swarm mode deployments. Complex recipes support (i.e. deploy complex systems in one command).
