Secrets Management Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

onepasswordconnectsdk

Python SDK for 1Password Connect

cottage

A modern git based age-encrypted secrets manager for teams.

pydantic-settings-aws

Type-safe Pydantic Settings from AWS Secrets Manager and SSM Parameter Store

python-dotenv-vault

Load environment variables from encrypted .env.vault files

hyperi-pylib

Opinionated, drop-in Python toolkit for production services at scale. The patterns from blog posts as actual code: 8-layer config cascade, structured logging with PII masking, Prometheus + OpenTelemetry, multi-backend secrets (Vault/AWS/GCP/Azure), Kafka helpers, CEL expression engine, FastAPI-friendly.

python-secrets

Python CLI for managing secrets and eliminating default passwords in FOSS

secretzero

Git native secrets-as-code

dotenvage

Dotenv with age encryption: encrypt/decrypt secrets in .env files.

kingfisher-bin

Find, validate, and map the impact of leaked secrets across your stack. Revoke fast. 950+ rules.

murk-secrets

Encrypted secrets manager for developers — one file, age encryption, git-friendly

kstlib

Config-driven helpers for Python projects (dynamic config, secure secrets, preset logging, and more)

envilder

🚀 Envilder centralizes cloud secrets (AWS SSM, Azure Key Vault) into your app runtime. CLI, GitHub Action, and native SDKs for .NET, Python, and more. Zero vendor lock-in, no SaaS middleman. Your secrets stay in your cloud.

pacli-tool

A secure CLI to manage secrets locally with encryption, master password, and clipboard support.

cypher-cell

Hardened, self-destructing memory cells for Python secrets

envseal-vault

envseal is a CLI tool that scans .env* files across multiple repositories, normalizes them, and syncs them into a centralized Git-backed vault as SOPS-encrypted dotenv files, providing safe key-only diffs and versioned rollback.

pydantic2-settings-vault

A Pydantic v2 settings extension for secure configuration management using HashiCorp Vault OpenSource (OSS) and Enterprise

hawk-scanner

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

pyvault

Python password manager

drape

Hide secrets from LLMs when reading config files (.env, SOPS, YAML, JSON, TOML).

secret-keeper

Manage your application secrets safe & easy

agentsecrets

Python SDK for AgentSecrets — zero-knowledge secrets infrastructure for AI agents

how2validate

A CLI tool to validate secrets for different services.

aws-ssm-tool

AWS SSM tool