GitGuardian/ggshield
View on GitHub ↗ ★ 2,014 Python
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.
7 mentions on Hacker News by 4 people: 1 story, 6 comments · first 2021-11-04 · latest 2024-06-05
20082026
-
…detect and notify you of leaked secrets, passwords or high entropy lines from your online repos. https://github.com/GitGuardian/ggshield
comment by xedeon · 2024-06-05 · in Entropy, a CLI that scans files to find high entropy lines (might be secrets) -
…https://docs.github.com/en/developers/overview/secret-scanni... https://github.com/godaddy/tartufo https://github.com/GitGuardian/ggshield https://github.com/awslabs/git-secrets https://github.com/sirwart/secrets…
comment by pabs3 · 2022-11-21 · in GitHub access token exposure -
you can try ggshield - https://github.com/GitGuardian/ggshield -
comment by cwinq · 2022-10-14 · in Toyota suffered a data breach by accidentally exposing a secret key on GitHub -
You can definitely use pre commit hooks for this like the one of ggshield https://github.com/GitGuardian/ggshield - remediation is far quicker when the secret does't make it to the codebase!
comment by cwinq · 2022-10-14 · in Toyota suffered a data breach by accidentally exposing a secret key on GitHub -
In the meantime, try ggshield cli https://github.com/GitGuardian/ggshield
comment by lumberjack24 · 2022-10-13 · in Toyota suffered a data breach by accidentally exposing a secret key on GitHub -
you may also want to look at ggshield: https://github.com/GitGuardian/ggshield
comment by cwinq · 2022-04-20 · in Secrets: A command-line tool to prevent committing secret keys into your source -
▲ 2
Scan Docker images for hardcoded credentials (Dockerfile, build args, filesys)story by lumberjack24 · 2021-11-04 · 0 comments