A security layer for Git repositories
-
Updated
Nov 14, 2026 - Go
#
git-security
Here are 38 public repositories matching this topic...
Finding potential software vulnerabilities from git commit messages
-
Updated
Oct 7, 2023 - Python
Security guardrails for Claude Code, MCP tools, and Claude cowork workflows. Local-first modular YARA-style guard packs for secrets, exfiltration, prompt injection, MCP abuse, and risky agent actions.
mcp security-automation devsecops claude ai-security guardrails local-first git-security prompt-injection agent-security secrets-scanning claude-code mcp-security claude-cowork exfiltration-detection
-
Updated
May 19, 2026 - Python
SecScan is a fast, configurable secret scanning tool written in Go that detects API keys, tokens, credentials, and high-entropy secrets across source code and full Git history. Built for developers and CI pipelines, with strong defaults and low false positives.
golang security credentials static-analysis ci-cd security-scanner security-tools devsecops source-code-analysis api-keys github-actions secrets-detection git-security entropy-analysis security-tools-testing
-
Updated
Jul 17, 2026 - Go
Exposure intelligence for the AI-infrastructure layer — finds and weighs leaked credentials, MCP/agent configs, git-metadata secrets, and supply-chain risk, and tells you which exposures to trust. Active verification, orphan-signal triage, SARIF dedup. OWASP LLM + MITRE ATLAS tagged.
python cli security mcp asyncio pentesting offensive-security security-scanner vulnerability-scanner credential-scanner ai-security git-security supply-chain-security mitre-atlas ml-security llm-security secret-detection owasp-llm react2shell
-
Updated
Sep 6, 2026 - Python
Use Certificate Transparency Logs to find Jenkins and GitLab instances containing secrets
-
Updated
Mar 24, 2023 - Go
Official technical documentation, API reference, and deployment guides for Crenox Pro on-premises secret governance.
-
Updated
Nov 11, 2026
Git watchdog will scan your public repository and find out the vulnerabilities
-
Updated
Dec 16, 2021 - Go
# ⚖️ LEGAL COMPLIANCE TOOL ⚖️ ## THIS IS A GDPR COMPLIANCE CHECKER ## NOT A MALICIOUS SCANNER OR PHISHING TOOL ## WE HELP ORGANIZATIONS COMPLY WITH EUROPEAN DATA PROTECTION LAW
open-source developer-tools devops-tools data-privacy security-scanner data-protection cli-tool privacy-tools git-analysis eu-gdpr compliance-automation enterprise-security git-security python-tool regulatory-compliance gdpr-compliance repository-scanner compliance-audit audit-tool legal-compliance
-
Updated
Jul 14, 2025 - Python
Find credentials in files or staged Git changes with redacted output and allowlisting.
-
Updated
Oct 21, 2026 - JavaScript
CLI tool to scan local codebases and public GitHub repos for leaked API keys and secrets, including git history
python cli security static-analysis secrets cybersecurity git-history python-security devsecops api-keys git-security secret-scanning api-key-scanner github-scanner
-
Updated
Jun 11, 2026 - Python
🔏 The chain of custody for your Git refs. See who pushed a branch, tag or Entire checkpoint, when they pushed it, and whether gittuf's Reference State Log verifies it, from the terminal or your coding agents.
-
Updated
Nov 9, 2026 - Go
Audits Git repository configurations, commit history secret leaks, GitHub Actions .github/workflows/*.yml files, branch protection rules, and unpinned third-party action tags for script injection and GITHUB_TOKEN over-privilege.
-
Updated
Nov 7, 2026 - Python
Keep your GitHub repositories clean. Detect leaks, mistakes, and vulnerabilities before you even know they exist.
github git security privacy scanner cybersecurity leaks privacy-focused git-security ncryptsion firstdecree thefirstdecree gitfaye
-
Updated
Sep 20, 2026 - EJS
A step-by-step guide to configure SSH commit signing on Windows and get the "Verified" badge on GitHub. No prior Git, SSH, or GPG knowledge required.
github git windows ssh tutorial version-control cybersecurity developer-tools learning-by-doing beginner-friendly ssh-keys security-tools signed-commits commit-signing git-security ssh-signing
-
Updated
Nov 9, 2026
A practical workflow for making AI-assisted Git commits cryptographically signed and GitHub-Verified every time. Covers local coding assistants, remote AI agents, GitHub Apps, strict no-unsigned-fallback rules, verification checks, and branch protection.
github git devops ai developer-tools software-supply-chain secure-development branch-protection signed-commits commit-signing git-security gpg-signing ai-assisted-development ai-agent verified-commits ai-coding-assistant ssh-signing coding-agent github-verfication secure-git
-
Updated
Nov 7, 2026
Stop accidentally committing API keys to git. Store them in macOS Keychain, populate .env files on demand. Claude Code skill + manual Terminal commands.
macos security dotenv keychain devtools secrets environment-variables developer-tools env api-security secrets-management api-keys git-security credential-management claude-code
-
Updated
Jan 31, 2026 - JavaScript
Advanced Secrets & API Key Scanner - Protect Your Code, Protect Your Business
security-tools devsecops privacy-tools secrets-detection git-security github-security api-key-scanner credential-scanning
-
Updated
Dec 3, 2025 - HTML
PoC for CVE-2026-105437 — Git's three-way merge (xdiff/xmerge.c) sizes the merge output buffer in a 32-bit int, so a committed conflict-marker-size gitattribute plus many conflicts overflows it and the merge is written past an undersized heap allocation; git merge-tree is the primary vector. Validated on 2.56.0 (SIGSEGV) vs 2.56.1.
git gitlab proof-of-concept merge poc security-research xdiff vulnerability-research heap-overflow integer-overflow git-security gitaly cwe-787 cwe-190 cve-2026-105437
-
Updated
Nov 11, 2026 - Python
Add this topic to your repo
To associate your repository with the git-security topic, visit your repo's landing page and select "manage topics."