secret-scanning 开源项目推荐（831 个）

edoardottt /cariddi

接收域名列表，抓取 URL，并扫描端点、机密信息、API 密钥、文件扩展名、令牌等。

mongodb /kingfisher

检测泄露的秘密+实时验证。在堆栈中绘制爆炸半径。快速撤销。950+条规则。

openqodex /openqodex

面向编程智能体的开源 AI 代码审查。独立的审查器会在你推送前检查智能体写入的每项变更，支持 Claude Code、Codex、Cursor 和 Cline。自身无需账号或密钥。

MaxHu-xuan /chat-archive-guard

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

sgasser /pasteguard

AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.

gitleaks /gitleaks-action

Protect your secrets using Gitleaks-Action

trufflesecurity /force-push-scanner

Scan for secrets in dangling commits on GitHub using GH Archive data.

jasonzhang06-source /sharelint

Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.

LucasFaudman /apkscan

在解编译和解混淆Android文件后，扫描秘密、端点及其他敏感数据。（.apk、.xapk、.dex、.jar、.class、.smali、.zip、.aar、.arsc、.aab、.jadx.kts）。

advanced-security /secret-scanning-custom-patterns

Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security

recranvvi5c /ContextCrucible

Budget-aware context compiler for coding agents - scan, grade, spark-test and pour a hard-budget context pack

devploit /geminiHunter

Secret scanner for exposed Google Gemini API keys in JavaScript, source maps, Wayback snapshots and Android APKs. Validates keys, reports restrictions and bypasses.

santhreal /keyhog

GPU-accelerated secret scanner for code, Git history, containers, cloud, browser assets, and CI. 923 detectors, live verification, CUDA, Metal, WGPU.

AGGIB /Stroq

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky commands to the content that dictated them. Open source, no telemetry.

ray-amjad /claude-code-mods

Claude Code mods: panes, bands, prompt guards, secret handling and memory tools

trufflesecurity /trufflehog-burp-suite-extension

Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.

Ishannaik /agent-sweep

Find and redact secrets in AI coding agent histories (Claude Code, and more).

Gk0Wk /ClawGuard

The antivirus for OpenClaw — approve dangerous actions, scan skills, block secret leaks, and keep humans in control, for safety.

dinosn /leaklens

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

DavidCarliez /cover

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.