#大语言模型#Gitleaks 是一个开源SAST(静态应用安全测试)命令行工具,用于检测Git 仓库以防止把密码、API 密钥和访问令牌等机密信息硬编码到代码中
TruffleHog 是一个用来探测泄漏密钥的工具,支持扫描的数据源包括git、github、gitlab、S3、文件系统、文件和标准输入
Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories.
翻译 - 啊,嘘!实时查找GitHub秘密
#安全#🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
A Vault swiss-army knife: A CLI tool to init, unseal and configure Vault (auth methods, secret engines).
翻译 - 保险柜瑞士军刀:K8s操作员,具有自动令牌更新,自动配置,多个开封选项的Go客户端。一个用于初始化,解封和配置Vault的CLI工具(身份验证方法,秘密引擎)。直接秘密注入Pod。
Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious — such as tokens, passwords, and private keys.
Environment variables meet macOS Keychain and gnome-keyring <3
翻译 - 环境变量符合macOS Keychain和gnome-keyring <3
Pluggable linting tool to prevent committing credential.
#安全#Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
List of regex for scraping secret API keys and juicy information.
Create Kubernetes secrets from Vault for a secure GitOps based workflow.
翻译 - 从Vault创建Kubernetes机密,以实现基于GitOps的安全工作流。
Secure Secret management for Kubernetes (with gpg, Google Cloud KMS and AWS KMS backends)
A comprehensive cross-platform .NET Library for HashiCorp's Vault, a secret management tool
#安全#One-time encrypted password/secret sharing
Private key usage verification
翻译 - 私钥使用验证