git-security

A security layer for Git repositories

Finding potential software vulnerabilities from git commit messages

Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and risky agent actions.

A demo of gittuf

Use Certificate Transparency Logs to find Jenkins and GitLab instances containing secrets

Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which exposures to trust. Active verification, orphan-signal triage, SARIF dedup. OWASP LLM + MITRE ATLAS tagged.

SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.

Git watchdog will scan your public repository and find out the vulnerabilities

# ⚖️ LEGAL COMPLIANCE TOOL ⚖️ ## THIS IS A GDPR COMPLIANCE CHECKER ## NOT A MALICIOUS SCANNER OR PHISHING TOOL ## WE HELP ORGANIZATIONS COMPLY WITH EUROPEAN DATA PROTECTION LAW

CLI tool to scan local codebases and public GitHub repos for leaked API keys and secrets, including git history

Keep your GitHub repositories clean. Detect leaks, mistakes, and vulnerabilities before you even know they exist.

🔐 Scan repos for secrets, API keys & PII before going public. Integrates TruffleHog, Gitleaks & Presidio with auto-remediation.

Find and remove secrets from your git history — before someone else does.

Advanced Secrets & API Key Scanner - Protect Your Code, Protect Your Business

A security scanner for Git repositories that detects malware, backdoors, and suspicious patterns before cloning. Features static code analysis, dependency vulnerability scanning, entropy detection, and multi-format reporting. Built in Python for developers and security professionals.

Automated secret detection and commit protection platform for Git repositories using regex and entropy-based analysis.

🔐 Scan .env files and git history for accidentally committed secrets, API keys, and credentials. Pure Python, no dependencies.

This is going to be a customized script for searching through people's gh repos for creds, personal info, keys, etc.

High-performance secret detection engine with 131 provider rules (Go)

Transparent git security shim that blocks malicious repos before they execute code on your machine — catches poisoned .git/config (core.fsmonitor), hidden hooks, and install-script traps. Zero workflow change, fails open. Stop being a victim of GitHub malware. Go · macOS/Linux.