blind-sec/security-projects

security-projects is a collection of security tools and automation scripts written in Python, described by its author as built for real world use rather than as demos or learning exercises. The README is short and lists one tool so far, with room to add more over time. The tool currently included is called secret-scan. It scans codebases and git history for secrets, things like accidentally committed passwords, API keys, or tokens. According to the README, it uses over 100 rules along with Shannon entropy, a mathematical way of spotting text that looks random enough to be a secret even if it does not match a known pattern. It is described as having zero dependencies, meaning it does not rely on any other installed packages to run. The project follows a stated philosophy for every tool it contains: each one ships with its own unit tests, each one aims for zero or minimal dependencies so it can run anywhere Python is installed, and each one is meant to work across Linux, macOS, and Windows. To use any tool in the collection, you clone the repository, move into that tool's folder, and install it in editable mode with pip. The README does not go into further detail about command line usage, configuration options, or example output for secret-scan, so anyone trying it would need to look inside the tool's own folder for more specifics. Because the README itself is brief, this description covers everything it states. There is no mention yet of a license, and the project has no stars at the time of writing, suggesting it is a new or early stage effort.