From 163e76947fa32abeddf610c4070bf84aea0a5c1d Mon Sep 17 00:00:00 2001 From: Siyuan Feng Date: Tue, 1 Sep 2026 17:37:34 -0400 Subject: [PATCH] Add dbmask to security tools list MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Adds dbmask, an MIT-licensed Python tool that discovers sensitive columns, masks them with deterministic fakes (joins keep working), and then validates the masked copy row by row. Actively maintained (v0.1.1, CI, docs site, security policy). Placed alphabetically. I am the author — happy to adjust wording or placement. --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 3b0fd58..dc1b015 100644 --- a/README.md +++ b/README.md @@ -35,6 +35,7 @@ Supported by: [GuardRails.io](https://www.guardrails.io) - [GuardRails](https://github.com/apps/guardrails) - A GitHub App that gives you instant security feedback in your Pull Requests. - [Hubble](https://github.com/hubblestack/hubble) - Hubble is a modular, open-source security compliance framework. - [Salus](https://github.com/coinbase/salus) - Multi purpose security scanning tool supporting Ruby, Node, Python and Go. +- [dbmask](https://github.com/sealandseacat/dbmask) - Scan SQL databases for sensitive columns, mask them with deterministic fakes, and verify the masking before data leaves production. ## Static Code Analysis