function: secrets-management

120 products, primary matches first, then adoption-weighted; health v2 shown.

Product	Health v2	Stars	Maturity
fabriziosalmi/certmate CertMate is a self-hosted certificate lifecycle management platform that issues and renews TLS certificates via ACME/Let's Encrypt across 2…	81	1404	active
cloudposse/atmos Atmos is an open-source CLI runtime for infrastructure that orchestrates Terraform, OpenTofu, Kubernetes, Helm, and containers through decl…	95	1362	active
pipe-cd/pipecd PipeCD is a GitOps-style continuous delivery platform that provides a unified deployment and operations experience for applications across …	99	1346	active
freeipa/freeipa FreeIPA is an integrated security information management solution providing centralized identity, authentication, and access control for Li…	77	1274	stable
distr-sh/distr Distr is an open-source software distribution platform (control plane) for delivering applications to self-hosted, BYOC, on-premises, air-g…	85	1219	active
paradigmxyz/centaur Centaur is a self-hosted, open-source platform for running shared AI agents for teams, triggered via Slack mentions or an API. Each convers…	77	1218	active
FiloSottile/passage passage is a fork of the password-store (pass) CLI password manager that uses age encryption instead of GnuPG. It stores secrets as age-enc…	23	1187	active
pypa/gh-action-pypi-publish The official PyPA GitHub Action for publishing Python distribution packages to PyPI and TestPyPI directly from CI/CD workflows. It supports…	96	1184	active
exoframejs/exoframe Exoframe is a self-hosted deployment tool consisting of a CLI client and server that deploys projects to Docker with a single command, usin…	96	1154	active
i-am-bee/agentstack Agent Stack is open-source infrastructure (hosted by the Linux Foundation) for turning AI agents into running HTTP services, built on the A…	80	1149	active
awspring/spring-cloud-aws Spring Cloud AWS is a community-maintained Spring and Spring Boot integration project for AWS managed services such as S3, SQS, SNS, Dynamo…	95	1120	active
tophant-ai/ClawVault ClawVault is a security vault plugin for OpenClaw AI agents that provides fine-grained, composable 'atomic' controls over what agents can a…	76	1081	active
hcavarsan/pipedash Pipedash is a desktop, self-hosted, and iOS app that aggregates CI/CD pipeline status from multiple providers like GitHub Actions, GitLab C…	68	1078	active
denoland/clawpatrol Claw Patrol is a security firewall and proxy for AI agents, written in Go, that intercepts agent traffic at the wire level and gates each a…	80	1030	active
mfat/sshpilot SSH Pilot is a user-friendly, cross-platform SSH and SFTP client with an integrated tabbed terminal, split view, and a dual-pane SFTP file …	81	1028	active
NVIDIA/OpenShell NVIDIA OpenShell is an open-source runtime for executing autonomous AI agents (Claude Code, Codex, OpenCode, Copilot CLI) inside sandboxed …	78	8378	experimental
doy/rbw rbw is an unofficial command line client for Bitwarden written in Rust. It runs a background agent that holds decryption keys in memory (li…	69	1458	maintenance
eth0izzle/shhgit shhgit is a secrets detection tool that scans GitHub, GitLab, Bitbucket repositories and local directories for accidentally committed crede…	36	3977	abandoned
cloudflare/redoctober Red October is a Go-based TLS server implementing two-man rule style encryption and decryption, where no single individual can decrypt data…	10	1418	abandoned
djenriquez/vault-ui Vault-UI is a graphical web and desktop interface for managing HashiCorp Vault, written in React with a Material UI design. It can be deplo…	10	1313	abandoned