How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API tokens, and private keys. It functions as a security auditor for version control systems, analyzing both local files and remote repositories across platforms including GitHub, GitLab, and Bitbucket. The tool utilizes a detection engine based on signature-matching, custom regular expressions, and entropy checks to locate sensitive data. It allows for the use of custom search signatures and queries to identify non-standard secrets that may not be covered by predefined patterns. T
TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
A tool to capture all the git secrets by leveraging multiple open source git searching tools
Tool for advanced mining for content on Github
A Github scanning tool that identifies hardcoded credentials while filtering the false positive data through machine learning models :lock:
The main features of sap/credential-digger are: Secret Scanning, Security and Vulnerability Scanning, Sensitive Data Leakage.
Projects with overlapping indexed features include: yelp/detect-secrets — detect-secrets is a modular secret scanning tool that identifies hard-coded credentials and sensitive information in… unkl4b/gitminer — Tool for advanced mining for content on Github. anshumanbh/git-all-secrets — A tool to capture all the git secrets by leveraging multiple open source git searching tools. dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… eth0izzle/shhgit — shhgit is a static analysis security tool and secret detection scanner designed to identify leaked credentials, API… zricethezav/gitleaks — Gitleaks is a static analysis security tool and secret detection engine designed to find hardcoded passwords, API…