Open source alternatives to secret-scanning
24 open source AI Skills apps to use instead, best rated first.
Top picks
- G
github-ops
Launchgithub-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify
Open source
- O
opensource-pipeline
Launchopensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st
Open source
- A
andrej-karpathy-skills
Launchandrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis
Open source
- M
microsoft/markitdown
Launchmarkitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve
Open source
- O
od-contribute
Launchod-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the
Open source
- G
github-deep-research
Launchgithub-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive
Open source
More AI Skills apps
modelcontextprotocol/server-memory
Knowledge graph-based persistent memory for maintaining context
netdata/netdata#Netdata
Discovery, exploration, reporting and root cause analysis over Netdata metrics
Learn Claude Code
by shareAI-lab - A really interesting analysis of how coding agents like Claude
About secret-scanning
secret-scanning
Guide for configuring and managing GitHub secret scanning, push protection
secret-scanning is an agent skill from the github/awesome-copilot collection that guides the configuration and management of GitHub secret scanning. It covers detecting leaked credentials in a repository, setting up push protection so secrets are blocked before they reach the repository, defining custom secret patterns with regular expressions, and triaging, dismissing or remediating secret alerts. It also covers resolving a push that has been blocked from the command line, configuring delegated bypass for push protection, excluding directories through a secret_scanning.yml file, understanding the alert types, and enabling validity and extended metadata checks. The skill also points to a way of scanning local changes for secrets before a commit, through an AI coding agent. It is useful for security and platform teams who want credentials kept out of repositories, and for developers who have been blocked by a push and need to know what to do. The most important remediation step is that a secret that has been exposed must be revoked and replaced, since removing it from the code does not remove it from the history. Bypass permissions should be granted sparingly and reviewed. The skill is installed with the skills CLI from the github/awesome-copilot repository. Its skills.sh page showed about 4.5K installs and passing results from three security audits at the time of the scan.
- Price
- Free
- Made by
- github
- Category
- AI Skills
- Website
- github.com/github/awesome-copilot/secret-scanning