mongodb/kingfisher
View on GitHub ↗ ★ 1,297 Rust
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
7 mentions on Hacker News by 4 people: 1 story, 6 comments · first 2025-09-08 · latest 2026-05-14
20082026
-
…scanner and validator written in Rust, that can also map blast radius and revoke many creds: < https://github.com/mongodb/kingfisher > It can scan repos, history, and artifacts and validate many findings against provider APIs, as well as…
comment by micksmix · 2026-05-14 · in Composer leaks contents of tokens configured as GitHub OAuth tokens -
There's also https://github.com/mongodb/kingfisher
comment by Onavo · 2026-04-11 · in A security scanner as fast as a linter – written in Rust -
…in Rust, I was hoping for a way to use Kingfisher as a library, but did not find one. So I filed https://github.com/mongodb/kingfisher/issues/189 Of course, it'd always be possible to invoke some binary. But I am still curious about a…
comment by lorenzleutgeb · 2026-01-23 · in Radicle: The Sovereign Forge -
There's https://github.com/gitleaks/gitleaks and https://github.com/mongodb/kingfisher
comment by axismundi · 2026-01-23 · in Radicle: The Sovereign Forge -
▲ 3
Show HN: Kingfisher, a fast OSS secret scanner with validation and blast radiusstory by micksmix · 2026-01-06 · 0 comments
-
I'm curious how Kingfisher would do against the proprietary dataset: https://github.com/mongodb/kingfisher Any chance you could try and share results? Full disclosure, I built Kingfisher
comment by micksmix · 2025-10-21 · in Show HN: Narada – Open-source secrets classification model -
…scan --s3-bucket my-logs --s3-prefix prod/2025/09/ Baselines help keep noise down over time. Repo: https://github.com/mongodb/kingfisher (Apache-2.0) Disclosure: I help maintain Kingfisher.
comment by micksmix · 2025-09-08 · in Keeping secrets out of logs (2024)