Blastradius

Blastradius (br) is a read-only CLI tool designed for organizations to locate all instances where a problematic package, runtime, certificate, or secret exists within their code repositories, CI runs, container images, caches, build artifacts, and developer laptops. It helps security and development teams identify exposure points for vulnerabilities and compromised secrets by indexing GitHub organizations, container registries, and machines without modifying data. It complements traditional vulnerability scanners by answering where a known-bad package or secret lives and who owns each instance, aiding incident response and cleanup.