Open-source secrets-management software

115 open-source libraries, tools and applications tagged secrets-management, ranked by how closely secrets-management is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.

115 products, primary matches first, then adoption-weighted; health v2 shown.

Product	Health v2	Stars	Maturity
distr-sh/distr Distr is an open-source software distribution platform (control plane) for delivering applications to self-hosted, BYOC, on-premises, air-g…	86	1238	active
FiloSottile/passage passage is a fork of the password-store (pass) CLI password manager that uses age encryption instead of GnuPG. It stores secrets as age-enc…	23	1201	active
pypa/gh-action-pypi-publish The official PyPA GitHub Action for publishing Python distribution packages to PyPI and TestPyPI directly from CI/CD workflows. It supports…	86	1183	active
i-am-bee/agentstack Agent Stack is open-source infrastructure (hosted by the Linux Foundation) for turning AI agents into running HTTP services, built on the A…	78	1172	active
Exoframe Exoframe is a self-hosted deployment tool consisting of a CLI client and server that deploys projects to Docker with a single command, usin…	89	1156	active
awspring/spring-cloud-aws Spring Cloud AWS is a community-maintained Spring and Spring Boot integration project for AWS managed services such as S3, SQS, SNS, Dynamo…	93	1123	active
hcavarsan/pipedash Pipedash is a desktop, self-hosted, and iOS app that aggregates CI/CD pipeline status from multiple providers like GitHub Actions, GitLab C…	85	1093	active
tophant-ai/ClawVault ClawVault is a security vault plugin for OpenClaw AI agents that provides fine-grained, composable 'atomic' controls over what agents can a…	71	1079	active
denoland/clawpatrol Claw Patrol is a security firewall and proxy for AI agents, written in Go, that intercepts agent traffic at the wire level and gates each a…	81	1076	active
mfat/sshpilot SSH Pilot is a user-friendly, cross-platform SSH and SFTP client with an integrated tabbed terminal, split view, and a dual-pane SFTP file …	78	1039	active
OpenShell NVIDIA OpenShell is an open-source runtime for executing autonomous AI agents (Claude Code, Codex, OpenCode, Copilot CLI) inside sandboxed …	79	16462	experimental
doy/rbw rbw is an unofficial command line client for Bitwarden written in Rust. It runs a background agent that holds decryption keys in memory (li…	63	1531	maintenance
eth0izzle/shhgit shhgit is a secrets detection tool that scans GitHub, GitLab, Bitbucket repositories and local directories for accidentally committed crede…	33	3989	abandoned
cloudflare/redoctober Red October is a Go-based TLS server implementing two-man rule style encryption and decryption, where no single individual can decrypt data…	10	1415	abandoned
djenriquez/vault-ui Vault-UI is a graphical web and desktop interface for managing HashiCorp Vault, written in React with a Material UI design. It can be deplo…	10	1313	abandoned