Credentials Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

trufflehog

Find, verify, and analyze leaked credentials

rds-proxy-password-rotation

Python script to rotate the RDS credentials using a separate credential for the application.

whispers

Identify hardcoded secrets in static structured text (version 2)

boto3-refresh-session

A drop-in replacement for boto3.Session named RefreshableSession. It automatically refreshes temporary AWS credentials, caches clients, and natively supports MFA providers. It also supports automatic temporary AWS security credential refresh for STS, IOT Core, and custom credential callables.

notenv

Encrypted .env replacement: secrets encrypted client-side, stored on storage you already own, injected into your process.

kingfisher-bin

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 950+ rules.

pepperize-cdk-ses-smtp-credentials

Generate SES smtp credentials for a given user and store the credentials in a SecretsManager Secret.

credsweeper

CredSweeper is a tool to detect credentials in any directories or files. CredSweeper could help users to detect unwanted exposure of credentials (such as token, passwords, api keys etc.) in advance. By scanning lines, filtering, and using AI model as option, CredSweeper reports lines with possible credentials, where the line is, and expected type o

click-creds

Pluggable credentials storage and management for click CLI apps

dbeaver-creds

Decrypt DBeaver's credentials-config.json file and display the output (a JSON string).

afp-cli

Command line client for AWS federation proxy api

xrpl-lab

XRPL training workbook — learn by doing, prove by artifact

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

archon-keymaster

Full stack decentralized identity platform and reference implementation for the did:cid DID method

creds

Creds is a library for managing user accounts on Linux, FreeBSD and OpenBSD.

aihound

Credential Scanner for Popular Desktop AI Platforms

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

credentialdigger

Credential Digger

knime-passbolt-py

Python companion package for the knime-passbolt KNIME extension — consume Passbolt credentials in KNIME Python Script nodes.

blockchain-certificates

Used to create, issue, revoke, or validate certificates (or any other PDF file) on the public Bitcoin blockchain.

lbx

A lightweight secret storage vault with CLI and Python API. Stores secrets in encrypted files with master password secured via OS keychain (keyring).

deepsecure

Effortlessly secure your AI agents and AI-powered workflows — from prototype to production. Get easy-to-use identity, credential, and access management built for fast-moving AI developers.

aws-session

A CLI to generate and store session credentials in ~/.aws/credentials file, based on ~/.aws/config profiles