Topics / #secret-management

Secret-management projects on GitHub

Storing, sharing, and detecting secrets like keys and credentials.

As of , the most-starred Secret-management projects on GitHub are vault (36.4K stars), infisical (29.8K stars) and trufflehog (28.5K stars). GitHub.Locker tracks 9 Secret-management repositories with 201.9K stars combined. The fastest-growing on October 16 was infisical, with +27 stars in a day.

9Projects
201.9KStars in total
+116Stars in a day
Browse in the catalog →github.com/topics/secret-management ↗

Hot right now

Most stars gained in a day · Oct 16

+27

infisical

Infisical/infisical · ★ 29.8K

Infisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.

+25

bifrost

maximhq/bifrost · ★ 8.9K

An open-source, high-performance AI gateway that unifies 23+ LLM providers behind a single OpenAI-compatible API, with automatic failover, load balancing, semantic caching, and budget controls built in.

+17

openbao

openbao/openbao · ★ 8.5K

OpenBao is a software solution to manage, store, and distribute sensitive data such as secrets, certificates, and keys, including on-demand generation of dynamic credentials and encryption-as-a-service.

+16

trufflehog

trufflesecurity/trufflehog · ★ 28.5K

TruffleHog is a CLI tool that discovers, classifies, validates, and analyzes leaked secrets like API keys, database passwords, and private keys across many sources (Git, GitHub, S3, Docker, Slack, filesystems, and more).

The all-time top

9 projects · by stars

  1. #1 · hashicorp/vault

    vault

    Vault is a tool for securely accessing secrets such as API keys, passwords, and certificates, giving you a unified interface with tight access control and detailed audit logging.

    36.4K
  2. #2 · Infisical/infisical

    infisical

    Infisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.

    29.8K
  3. #3 · trufflesecurity/trufflehog

    trufflehog

    TruffleHog is a CLI tool that discovers, classifies, validates, and analyzes leaked secrets like API keys, database passwords, and private keys across many sources (Git, GitHub, S3, Docker, Slack, filesystems, and more).

    28.5K
  1. 4

    sops

    23.4Kgetsops/sops · Go

    SOPS (Secrets OPerationS) is an editor for encrypted files that supports YAML, JSON, ENV, INI and BINARY formats, encrypting values with AWS KMS, GCP KMS, Azure Key Vault, HuaweiCloud KMS, age, or PGP.

  2. 5

    API-Security-Checklist

    23.3Kshieldfy/API-Security-Checklist

    A community checklist of the most important security countermeasures to apply when designing, testing, and releasing an API — a list of checkboxes you run through before shipping.

  3. 6

    waveterm

    22.5Kwavetermdev/waveterm · Go

    Wave is an open-source, AI-integrated terminal for macOS, Linux, and Windows. It bundles a context-aware AI assistant, durable SSH sessions, and a block-based workspace with editors and file previews.

  4. 7

    dotenv

    20.5Kmotdotla/dotenv · JavaScript

    A zero-dependency Node.js module that loads environment variables from a .env file into process.env, following the Twelve-Factor App principle of keeping configuration separate from code.

  5. 8

    bifrost

    8.9Kmaximhq/bifrost · Go

    An open-source, high-performance AI gateway that unifies 23+ LLM providers behind a single OpenAI-compatible API, with automatic failover, load balancing, semantic caching, and budget controls built in.

  6. 9

    openbao

    8.5Kopenbao/openbao · Go

    OpenBao is a software solution to manage, store, and distribute sensitive data such as secrets, certificates, and keys, including on-demand generation of dynamic credentials and encryption-as-a-service.

Often tagged together