Global

OpenRouter, but for agent tools instead of models.

WARNING] > Gitleaks is feature complete. I'm not merging new features into Gitleaks. Future releases will be security patches only.

Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint (and more) for credentials? We have an enterprise product that can help! Learn more at .

OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.

Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.

Before you store, migrate, share, or analyze a chat export, run ChatArchiveGuard locally to:

Infisical is the open-source platform for securing secrets, certificates, access, and AI Agents.

Manage your dotfiles across multiple diverse machines, securely.

A tool for secrets management, encryption as a service, and privileged access management

Cayu is an open-source Python framework for building and running domain-specific long-horizon agents, with a durable runtime built in.

Reloader is a Kubernetes controller that automatically triggers rollouts of workloads (like Deployments, StatefulSets, and more) whenever referenced Secrets, ConfigMaps or optionally CSI-mounted secrets are updated.

Automation engine to build, test and ship any codebase. Runs locally, in CI, or directly in the cloud

direnv is an extension for your shell. It augments existing shells with a new feature that can load and unload environment variables depending on the current directory.

This guide demonstrates how to store credentials on a YubiKey. The private keys cannot be copied back out of the device; a separate offline "Certify" key is retained only to replace or renew them.

env. Storing configuration in the environment separate from code is based on The Twelve-Factor App methodology.

git-secrets scans commits, commit messages, and --no-ff merges to prevent adding secrets into your git repositories.

Open-source job search Agent Skill and CLI: searches wide, matches one verified résumé, applies within your rules, tracks confirmed submissions.

Each finding is posted as a GitHub check-run annotation at the exact file and line, plus a human-readable summary comment on the PR.