blind-sec/security-projects — explained in plain English
Analysis updated 2026-05-18
Scan a codebase for accidentally committed passwords, API keys, or tokens.
Check git history for secrets that were committed and later removed but still exist in old commits.
Add a lightweight, dependency free security check to a Python project.
| blind-sec/security-projects | 0xallam/my-recipe | 0xhassaan/nn-from-scratch | |
|---|---|---|---|
| Stars | 0 | — | 0 |
| Language | Python | Python | Python |
| Last pushed | — | 2022-11-22 | — |
| Maintenance | — | Dormant | — |
| Setup difficulty | easy | moderate | moderate |
| Complexity | 2/5 | 2/5 | 4/5 |
| Audience | developer | general | developer |
Figures from each repo's GitHub metadata at analysis time.
security-projects is a collection of security tools and automation scripts written in Python, described by its author as built for real world use rather than as demos or learning exercises. The README is short and lists one tool so far, with room to add more over time. The tool currently included is called secret-scan. It scans codebases and git history for secrets, things like accidentally committed passwords, API keys, or tokens. According to the README, it uses over 100 rules along with Shannon entropy, a mathematical way of spotting text that looks random enough to be a secret even if it does not match a known pattern. It is described as having zero dependencies, meaning it does not rely on any other installed packages to run. The project follows a stated philosophy for every tool it contains: each one ships with its own unit tests, each one aims for zero or minimal dependencies so it can run anywhere Python is installed, and each one is meant to work across Linux, macOS, and Windows. To use any tool in the collection, you clone the repository, move into that tool's folder, and install it in editable mode with pip. The README does not go into further detail about command line usage, configuration options, or example output for secret-scan, so anyone trying it would need to look inside the tool's own folder for more specifics. Because the README itself is brief, this description covers everything it states. There is no mention yet of a license, and the project has no stars at the time of writing, suggesting it is a new or early stage effort.
A growing collection of Python security tools, starting with a secret scanner that finds leaked passwords and keys in code and git history.
Mainly Python. The stack also includes Python.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
double-check against the repo, no cap.