Tools
Every Skill, MCP server, CLI and plugin in the directory. Filter by type, profession or tag, or search by keyword.
Profession: Full-stack / Indie +1
Pick one or more: resources that suit any of them are listed.
Tags: github +1
Pick one or more: only resources carrying all of them are listed.
2 items
TruffleHog
CLIFinds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.
trufflesecurity/trufflehog28.6k
zizmor
CLIStatic security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.
zizmorcore/zizmor6.7k