Security · Intermediate · 1–2 weeks
Git Secrets Scanner & GitHub Action
A CLI and GitHub Action that scans repositories, including full commit history, for leaked API keys, passwords, and private keys.
- Go
- Regex + entropy analysis
- GitHub Actions
- SARIF
Features
- Pattern and entropy-based secret detection
- Fast scanning of the full Git history
- Allowlist file to suppress false positives
- SARIF output that shows up in GitHub code scanning
- Pre-commit hook mode that blocks leaks before they happen
Bonus: A seeded test corpus that reports precision and recall, compared against an existing open-source scanner.
Security · Intermediate · 1–2 weeks
SSH Honeypot with Attack Dashboard
A fake SSH server on a cheap cloud VM that records the logins and commands real attackers try, shown on a live dashboard.
- Python (asyncssh) or Go
- Docker
- PostgreSQL
- Grafana
- GeoLite2
Features
- Fake shell that imitates a Linux machine and logs every command
- Analytics on the most common passwords and commands
- World map of where attempts come from
- Strong isolation: its own VM, a container, and no outbound network
- Automatically generated weekly threat summary
Bonus: A write-up analyzing one week of real attack data, published alongside the repo.
Security · Advanced · 2 weeks
End-to-End Encrypted File Sharing
Share files by link, with encryption done in the browser so the server never sees file contents or keys.
- TypeScript
- Web Crypto API
- Node.js or Go
- S3-compatible storage
Features
- AES-GCM encryption in the browser, with the key kept only in the URL fragment
- Chunked streaming encryption for large files
- Links that expire or stop after a set number of downloads
- Optional password protection with proper key derivation
- A written threat model in the README
Bonus: A verification page that shows the stored ciphertext is unreadable without the link.