I've been working on NHI-Blast, an open-source security analysis tool focused on Non-Human Identity (NHI) risks.
The idea is to help identify credentials and identity-related security risks across:
- GitHub Actions workflows
- Terraform configurations
- AWS IAM policies
It introduces an R/E/Z classification model to analyze credential lifecycle and exposure risks.
Some of its capabilities:
- Access graph generation
- Security findings and risk analysis
- Credential rotation priorities
- Offline HTML reports
This is an independently developed project, and it's currently in Beta (v0.2.0).
I'd appreciate feedback from developers and security practitioners, especially on the detection logic, usability and areas worth improving.
🔗 GitHub: https://github.com/DKtech-dev/nhi-blast
Built to learn, improve and contribute to the security community.
Top comments (0)