Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for
Sealed Secrets is a Kubernetes secret encryption tool and controller designed for GitOps security. It provides a mechanism to encrypt sensitive data into specialized resources that can be safely stored in public version control systems and decrypted only within a cluster. The system uses an asymmetric encryption manager to seal secrets with a public key, ensuring that only the corresponding private key held within the cluster can unseal them. It includes utilities for security key rotation, secret re-encryption, and offline private key recovery to maintain data access during disaster recovery
aws-vault is a secure credential manager and command-line wrapper for AWS. It stores long-term identity keys using the native operating system secure keystore to prevent plaintext secrets from residing on disk. The tool orchestrates the exchange of long-term credentials for short-lived temporary sessions by assuming IAM roles, with support for multi-factor authentication and integration with AWS Identity Center for single sign-on access. It prevents credential exposure by injecting these temporary tokens directly into subprocesses or by simulating local metadata endpoints for software develop
The main features of godaddy/kubernetes-external-secrets are: Secrets Management.
Open-source alternatives to godaddy/kubernetes-external-secrets include: awslabs/git-secrets — Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating… bitnami-labs/sealed-secrets — Sealed Secrets is a Kubernetes secret encryption tool and controller designed for GitOps security. It provides a… chef/chef-vault — Securely manage passwords, certs, and other secrets in Chef. cloudflare/redoctober — Go server for two-man rule style file encryption and decryption. conradirwin/dotgpg — A secure and easy-to-use store for your production secrets. 99designs/aws-vault — aws-vault is a secure credential manager and command-line wrapper for AWS. It stores long-term identity keys using the…
