Find secrets with Gitleaks 🔑

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Pillage filesystems for sensitive information with Go 🔍

Secret and/or credential patterns used for gf.

The Logger that will prevent your data leak

convert secret patterns to gf compatible.

This is an extension for Azure DevOps that is a wrapper arround gitleaks created by Zachary Rice for easy execution inside your pipeline. Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for finding secrets, past or present, in your code.

A toolbox to help developers and open source referents to not waste their time with manual and boring tasks. Provides simple and light tools to make investigations in source code to look for hot data. Provides also primitives to manage GitHub and GitLab organizations.

Support gitleaks config development and extend some gitleaks features.

A gitleaks config that has most of Microsoft's deprecated credscan rules ported to it.

orgleaks is a tool to run gitleaks for an organization.

Open Source ASPM Platform

A secret scanner wrapper to aggregate results across multiple secret scanning tools

✨ Azure DevOps Pipeline - Docker Build, Trivy Scan, Secret Detection, Sonar, Kubernetes Deploy and others Steps

This repo exposes api's which can be used to dig through git repositories of a github user / single repo to find leaked git credentials.

Effortlessly create, manage, and publish captivating blog content with nextpalestine. Our platform empowers you to focus on writing and engaging your audience, leaving the technical complexities behind.

Security solution to find secrets in a git repository and report about them. It uses Gitleaks and some custom scripts to generate a JSON report for secrets found with only relevant information along with commit ids and commit authors. It can be used to update an Atlassian Confluence page and send an alert on Slack based on the findings.

Use Certificate Transparency Logs to find Jenkins and GitLab instances containing secrets

Repo for GitHub actions dockerfiles

This repository maintains a list of rules for finding secrets in a repository. These rules can be used for pre-commit hooks and post-commit repository scanning.