# Tools > Every listed resource, editors’ picks first. The filters below can be combined. - Search: append `?q=` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README. - Filter by type: append `?type=` to the URL. - Filter by profession: append `?profession=` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions - Filter by tag: append `?tag=` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags Resources for DevOps / SRE or ML / AI or Security, Tagged `git`: 11 items. > - DevOps / SRE: Deployment, monitoring, cloud resources and reliability. > - ML / AI: Model training, evaluation and LLM application development. > - Security: Code audits, vulnerability triage, penetration testing and compliance. - [bat](https://hebbmind.com/es/cli/bat.md): [CLI] A cat replacement with syntax highlighting, line numbers and Git change markers, plus --line-range to print specific lines. Falls back to plain text in pipes and other non-interactive use, and pairs with git diff or tail -f for code and logs. - [Gitleaks](https://hebbmind.com/es/cli/gitleaks.md): [CLI] Detects hardcoded passwords, API keys and tokens in Git repos, files and stdin, and can run as a pre-commit hook or GitHub Action to block leaks. Now feature-frozen with security fixes only, as the author has moved on to Betterleaks. - [TruffleHog](https://hebbmind.com/es/cli/trufflehog.md): [CLI] Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives. - [eza](https://hebbmind.com/es/cli/eza.md): [CLI] Community-maintained modern replacement for ls (successor to exa) with colored output, tree view, Git status and file icons, plus .gitignore filtering for quickly scanning directory structures. - [SOPS](https://hebbmind.com/es/cli/sops.md): [CLI] Encrypts secret values in YAML, JSON, ENV and INI config files using AWS, GCP or Azure KMS, age or PGP, so secrets can be safely committed to Git alongside code. A CNCF sandbox project. - [DVC](https://hebbmind.com/es/cli/dvc.md): [CLI] Version datasets and models the way Git versions code: data lives in remote storage like S3 or GCS while versions are tracked in your Git repo. Also offers reproducible pipelines and local experiment tracking, rerunning only the steps affected by a change. - [pre-commit](https://hebbmind.com/es/cli/pre-commit.md): [CLI] Multi-language git hook manager: declare formatting, lint, secret scanning and other hooks in .pre-commit-config.yaml to run automatically before each commit, or have the agent self-check with pre-commit run --all-files before committing. - [Differential Review](https://hebbmind.com/es/skill/differential-review.md): [Skill] From Trail of Bits: reviews PRs, commits or diffs from a security angle, tracing history with git blame, estimating blast radius by caller count and checking test coverage gaps, then writes a Markdown review report. - [Container Use](https://hebbmind.com/es/cli/container-use.md): [CLI] From Dagger: gives each coding agent its own container and git branch so multiple agents work in parallel without interfering, with command logs and the ability to take over the terminal at any time. Connects via MCP; needs Docker and Git. Still experimental. - [gh-stack](https://hebbmind.com/es/skill/gh-stack.md): [Skill] Manages stacked branches and dependent pull requests with the gh stack GitHub CLI extension: splits work into layered branches with one PR each, then handles push, submit, sync, rebase and merge, using flags that keep commands non-interactive for agents. Official GitHub skill. - [CC Safety Net](https://hebbmind.com/es/plugin/cc-safety-net.md): [Plugin] Before tool calls run, blocks destructive Git and file commands (git reset --hard, rm -rf) and access to sensitive files like SSH keys and .env. Parses command semantics, so bash -c wrappers are caught too. Works with Claude Code, Codex and other coding CLIs; needs Node.js 18+.