Yelp/detect-secrets
View on GitHub ↗ ★ 4,663 Python
An enterprise friendly way of detecting and preventing secrets in code.
15 mentions on Hacker News by 15 people: 3 stories, 12 comments · first 2018-06-22 · latest 2024-10-22
20082026
-
A similar tool is detect-secrets[1]. [1] https://github.com/Yelp/detect-secrets
comment by robinhoodexe · 2024-10-22 · in Show HN: I built a tool that helps people scan and clean any repo for secrets -
…kind of problems (or something equivalent). With the pre-commit framework, an example hook would be https://github.com/Yelp/detect-secrets
comment by kmarc · 2024-07-13 · in Firing Myself -
See also: - trufflehog: https://github.com/trufflesecurity/trufflehog - detect-secrets: https://github.com/Yelp/detect-secrets - semgrep secrets: https://semgrep.dev/products/semgrep-secrets -- (Paid, but may be included in existing…
comment by BeefWellington · 2024-06-04 · in Entropy, a CLI that scans files to find high entropy lines (might be secrets) -
…-0 detect-secrets-hook --baseline .secrets.baseline) test -z $no_secrets && exit $no_secrets 1: https://github.com/Yelp/detect-secrets
comment by mksybr · 2024-04-08 · in Rotz: Cross platform dotfile manager written in Rust -
I've used sync-secrets before, which has worked well- https://github.com/Yelp/detect-secrets
comment by jonfw · 2023-04-06 · in What happens when you leak AWS credentials and how AWS minimizes the damage -
…https://github.com/trufflesecurity/trufflehog https://about.sourcegraph.com/blog/no-more-secrets https://github.com/Yelp/detect-secrets https://docs.github.com/en/developers/overview/secret-scanni... https://github.com/godaddy/tartufo…
comment by pabs3 · 2022-11-21 · in GitHub access token exposure -
…a "detect-secrets" project that can detect potential secrets and can be used as a pre-commit hook: https://github.com/Yelp/detect-secrets
comment by neuronexmachina · 2022-10-14 · in Toyota suffered a data breach by accidentally exposing a secret key on GitHub -
…element where you can easily comment on the gist to make the author aware. Would something like https://github.com/Yelp/detect-secrets be interesting to include? Either as a filtering step to weed out false positives or to find even more…
comment by bradleyjkemp · 2021-05-10 · in Show HN: View plaintext passwords on GitHub Gists -
…in a much less painful way. Is it so hard to keep real secrets separate from the source code? [1] https://github.com/Yelp/detect-secrets
comment by barrucadu · 2021-01-31 · in RFC 8959: The “secret-token” URI Scheme -
…to help do this kind of thing [2]. [1] https://git-scm.com/book/en/v2/Customizing-Git-Git-Hooks [2] https://github.com/Yelp/detect-secrets
comment by yowlingcat · 2020-12-14 · in SolarWinds exposed FTP credentials in Public Github Repo: US Government Breach -
…which checks for passwords, high-entropy strings, etc. and has tools for managing false positives: https://github.com/Yelp/detect-secrets
comment by acdha · 2020-12-14 · in SolarWinds exposed FTP credentials in Public Github Repo: US Government Breach -
…- here are some: https://github.com/danger/danger-js , https://github.com/probot/probot , https://github.com/Yelp/detect-secrets , https://github.com/github/licensed , and many more...
comment by eyarz · 2020-03-10 · in Launch HN: Datree (YC W20) – Best practices and security policies on each commit -
▲ 2
An enterprise friendly way of detecting and preventing secrets in codestory by vinnyglennon · 2020-01-26 · 0 comments
-
▲ 2
An enterprise friendly way of detecting and preventing secrets in codestory by sahin-boydas · 2018-09-21 · 0 comments
-
▲ 2
Detect-secrets: Enterprise friendly way of detecting, preventing secrets in codestory by kumaranvpl · 2018-06-22 · 0 comments