Secrets Management Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

onepasswordconnectsdk

Python SDK for 1Password Connect

cottage

A modern git based age-encrypted secrets manager for teams.

pydantic-settings-aws

Type-safe Pydantic Settings from AWS Secrets Manager and SSM Parameter Store

python-dotenv-vault

Load environment variables from encrypted .env.vault files

kingfisher-bin

Detect leaked secrets + live validation. Map blast radius across your stack. Revoke fast. 950+ rules.

immunity-agent

Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.

secretzero

Git native secrets-as-code

hyperi-pylib

Opinionated, drop-in Python toolkit for production services at scale. The patterns from blog posts as actual code: 8-layer config cascade, structured logging with PII masking, Prometheus + OpenTelemetry, multi-backend secrets (Vault/AWS/GCP/Azure), Kafka helpers, CEL expression engine, FastAPI-friendly.

kstlib

Config-driven helpers for Python projects (dynamic config, secure secrets, preset logging, and more)

python-secrets

Python CLI for managing secrets and eliminating default passwords in FOSS

agentsecure

AgentSecure Community by ShellFrame AI: local-first secret virtualization for AI coding agents

prismor

Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.

murk-secrets

Encrypted secrets manager for developers — one file, age encryption, git-friendly

dotenvage

Dotenv with age encryption: encrypt/decrypt secrets in .env files.

cypher-cell

Hardened, self-destructing memory cells for Python secrets

how2validate

A CLI tool to validate secrets for different services.

pydantic2-settings-vault

A Pydantic v2 settings extension for secure configuration management using HashiCorp Vault OpenSource (OSS) and Enterprise

hawk-scanner

A powerful scanner to scan your Filesystem, S3, MySQL, Redis, Google Cloud Storage and Firebase storage for PII and sensitive data.

qnsi

Public docs, SDKs, and CLI packages for Quantum-Native Security Infrastructure (QNSI) — The Platform for PQC, zero-trust access, KMS, vault, encrypted storage, and AI infrastructure.

knime-passbolt-py

Python companion package for the knime-passbolt KNIME extension — consume Passbolt credentials in KNIME Python Script nodes.

agentsecrets

Python SDK for AgentSecrets: Build tools and agents on zero-knowledge secrets infrastructure

sikkerkey

SikkerKey Python SDK - Read secrets from any Python application using Ed25519 machine authentication.

envcontract

The contract for your .env — validate it, catch drift, never commit a secret. 100% local.