Secrets Management
Showing 36 of 42 projects
A tool for securely accessing secrets, providing encryption as a service, and managing privileged access.
A tool for secrets management, encryption as a service, and privileged access management.
An open-source platform for secrets management, certificate lifecycle, and privileged access management with self-hosting options.
A simple, flexible, and performant workload orchestrator for deploying containers, VMs, and legacy applications across on-prem and cloud infrastructure.
Transparently encrypts specific files in git repositories, allowing secure storage of secrets alongside public code.
A Kubernetes controller and tool for encrypting Secrets into SealedSecrets that can be safely stored in Git.
A simple wrapper for GPG to encrypt secrets in version control systems like Git, Mercurial, and Subversion.
A Python library for managing configuration with support for multiple file formats, environment variables, and secret storage.
A standalone tool that finds unprotected secrets like passwords and API keys in container images and file systems.
A universal secret manager CLI for developers that centralizes secrets from multiple providers and prevents secret sprawl.
A system for distributing and managing secrets, now deprecated in favor of HashiCorp Vault.
A CLI tool for managing secrets using AWS SSM Parameter Store and Secrets Manager as backends.
A simple credential management and distribution system using AWS KMS for encryption and DynamoDB for storage.
A secrets management service that stores encrypted secrets in DynamoDB with secure access controls.
A curated list of DevSecOps tools, resources, and training materials for integrating security into the development lifecycle.
An OWASP training app with 62 challenges demonstrating real-world secrets management mistakes and how to find them.
A high-performance open-source secret scanner with live validation, blast radius mapping, and 700+ detection rules for code, Git, CI, cloud, and SaaS platforms.
An open-source secrets management and machine identity solution for securing privileged access in modern infrastructure.
A Kustomize plugin that seamlessly decrypts SOPS-encrypted Kubernetes secrets and configs during GitOps workflows.
A command-line tool to encrypt and decrypt secrets using SSH keys.
A tool for securely backing up and versioning production secrets and shared passwords using GPG encryption.
A CLI and API for running path- and folder-based operations on the Vault Key/Value secrets engine.
A runtime configuration loader for Elixir applications that retrieves settings from environment variables, files, and cloud services.
Integrates SPIFFE SVID authentication with Hashicorp Vault to enable secretless authentication and keyless operations.
A Clojure library for generating cryptographically strong random numbers, tokens, and secrets.
A Kustomize plugin that generates Kubernetes secrets from AWS Secrets Manager, Azure Vault, HashiCorp Vault, environment variables, and other Kubernetes secrets.
A GitHub Action that securely exports secrets from AWS Secrets Manager to environment variables in GitHub Actions runners.
A GitHub Action that unlocks git-crypt encrypted secrets in CI/CD workflows using a base64-encoded key.
A Terraform provider for managing and using secrets from SecretHub within infrastructure-as-code workflows.
Load secrets from SecretHub into GitHub Actions workflows securely with automatic masking.
A utility that reads secrets from HashiCorp Vault and outputs environment variables for Terraform providers.
A CLI tool for managing GitHub Actions secrets across repositories with profiles and bulk operations.
A collection of shell plugins for sh, bash, and zsh that enhance productivity with npm scripts, git, secrets management, and more.
A Ruby gem providing a simpler, safer shorthand for accessing Rails credentials with clear error messages.
A Hush provider for resolving secrets from Google Cloud Platform's Secret Manager in Elixir applications.
A Neovim plugin providing encrypted storage for Lua tables using age-compatible encryption tools.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.