How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Trufflehog is a security tool designed to continuously monitor code repositories and cloud environments to detect, verify, and remediate exposed sensitive credentials and API keys. It functions as a comprehensive secret scanning engine that integrates directly into deployment pipelines and version control systems to intercept sensitive data before it is committed or pushed. By utilizing read-only operations and volatile memory processing, the system ensures that discovered credentials are never stored persistently, maintaining strict data privacy throughout the scanning lifecycle. The platfor
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating automated scanning directly into the version control commit lifecycle. It functions as a commit scanner that evaluates staged files and commit messages against defined security policies before changes are finalized in a repository. The tool utilizes regular expression pattern matching to identify potential secrets and supports the registration of custom patterns to address specific organizational security requirements. To manage operational friction, it includes mechanisms for
detect-secrets is a modular secret scanning tool that identifies hard-coded credentials and sensitive information in source code. It combines multiple detection strategies—regular expression pattern matching, Shannon entropy calculation, and a machine learning classifier—to find potential secrets, and uses a baseline-driven delta analysis to distinguish newly introduced secrets from pre-existing ones, reducing noise from legacy credentials. The tool integrates directly into development workflows through a git pre-commit hook that blocks commits introducing unbaselined secrets, and can be inco
Scan your code for security misconfiguration, search for passwords and secrets. :mag:
The main features of auth0/repo-supervisor are: Secret Scanning, Secrets Scanning, Vulnerability Scanners.
Open-source alternatives to auth0/repo-supervisor include: zricethezav/gitleaks — Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API… yelp/detect-secrets — detect-secrets is a modular secret scanning tool that identifies hard-coded credentials and sensitive information in… awslabs/git-secrets — Git-secrets is a security utility designed to prevent the accidental exposure of sensitive credentials by integrating… edoardottt/cariddi — Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more. trufflesecurity/trufflehog — Trufflehog is a security tool designed to continuously monitor code repositories and cloud environments to detect,… byt3bl33d3r/crackmapexec — CrackMapExec is a network penetration testing framework and automated security scanner designed to assess security…