A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:
Die Hauptfunktionen von sap/credential-digger sind: Secret Scanning, Security and Vulnerability Scanning, Sensitive Data Leakage.
Open-Source-Alternativen zu sap/credential-digger sind unter anderem: yelp/detect-secrets — detect-secrets is a modular secret scanning tool that identifies hard-coded credentials and sensitive information in… unkl4b/gitminer — Tool for advanced mining for content on Github. anshumanbh/git-all-secrets — A tool to capture all the git secrets by leveraging multiple open source git searching tools. dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… eth0izzle/shhgit — shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API… zricethezav/gitleaks — Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API…
shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API tokens, and private keys. It functions as a security auditor for version control systems, analyzing both local files and remote repositories across platforms including GitHub, GitLab, and Bitbucket. The tool utilizes a detection engine based on signature-matching, custom regular expressions, and entropy checks to locate sensitive data. It allows for the use of custom search signatures and queries to identify non-standard secrets that may not be covered by predefined patterns. T
TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
A tool to capture all the git secrets by leveraging multiple open source git searching tools
Tool for advanced mining for content on Github