A Python CLI tool that scans all repositories owned by a GitHub user/org for accidentally committed secrets (API keys, tokens, passwords, private keys, etc.).
Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps, Binja exports, etc. to get C2 credentials, embedded API keys, crypto material, or hardcoded passwords.
convert secret patterns to gf compatible.
ReleaseGuard is an open-source artifact policy engine and hardening suite. It scans, transforms, obfuscates, attests, and verifies release artifacts before they ship across every build ecosystem.
This GitHub Action allows you to run Gitleaks in your GitHub workflow.
Credential Scanner for Popular Desktop AI Platforms
The Clutch VS code extension allows any user to scan for secrets in his/hers open workspace automatically within the IDE
Deterministic pre-push verification for AI-assisted codebases: AST mutation testing, credential scanning, sandbox-escape detection, mock-usage alerts, and dependency hallucination defense.
A sarcastic list of secret scanners
A secret scanner wrapper to aggregate results across multiple secret scanning tools
The guardian of your Pull Requests. She decides what gets to merge.
GitHub Action that wraps Yelp/detect-secrets and provides an enterprise friendly way of detecting and preventing secrets in code.
A blazing fast secret-hunting tool for bug bounty hunters and security enthusiasts.
An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Secrets Management Process in Cybersecurity.
SecretKeeper is a tool for detecting secrets and misconfigurations on your Git repositories (Bitbucket and GitHub).
Security linter for environment variables, Docker, CI, Kubernetes, and runtime configuration.
🛡️ Stop deploying with missing env vars. Schema validation, secret leak scanning, and .env sync for Go, TypeScript, and Python.
noLeak, scans your entire Git history, identifies potential leaks (API keys, tokens, etc.), and provides an interactive wizard to permanently purge them from your repository.
Find leaked secrets across a repository's whole git history (Gitleaks + TruffleHog)
Tiny byte-level AI on CPU: a zero-dependency C++17 runtime and neural decision models (0.8 ms per 64-byte decision, 9.4 MB RAM). Reads raw bytes, no tokenizer. Specialists for secret scanning (F1 0.797 vs 0.337 for gitleaks on CredData) and PII redaction. Code under Apache-2.0; model weights under their own license.
To associate your repository with the secrets-scanner topic, visit your repo's landing page and select "manage topics."