Protect and discover secrets using Gitleaks 🔑

Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.

Secret and/or credential patterns used for gf.

Pillage filesystems for sensitive information with Go 🔍

This is an extension for Azure DevOps that is a wrapper arround gitleaks created by Zachary Rice for easy execution inside your pipeline. Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks is an easy-to-use, all-in-one solution for finding secrets, past or present, in your code.

A gitleaks config that has most of Microsoft's deprecated credscan rules ported to it.

This GitHub Action allows you to run Gitleaks in your GitHub workflow.

convert secret patterns to gf compatible.

A Python script that wraps the gitleaks tool to enable scanning of multiple repositories in parallel

A toolbox to help developers and open source referents to not waste their time with manual and boring tasks. Provides simple and light tools to make investigations in source code to look for hot data. Provides also primitives to manage GitHub and GitLab organizations.

A secret scanner wrapper to aggregate results across multiple secret scanning tools

run gitleaks in a gitleaks action

This repository maintains a list of rules for finding secrets in a repository. These rules can be used for pre-commit hooks and post-commit repository scanning.

Technical DevOps recipes for IAC Security and Governance

✨ Azure DevOps Pipeline - Docker Build, Trivy Scan, Secret Detection, Sonar, Kubernetes Deploy and others Steps

Automating various Git SAST Scanner tools like trufflehog, gitleaks ,etc

Continuous Integration And Continuous Delivery Poisoning Guides

🇨🇳翻译: <gitleaks> 审核git存储库的密码 ❤️ 校对 ✅

This repo exposes api's which can be used to dig through git repositories of a github user / single repo to find leaked git credentials.

Security solution to find secrets in a git repository using Gitleaks, generate a JSON report based on the findings from Gitleaks by extracting only the relevant information, find the commit id and commit author for each finding, update an Atlassian Confluence page with the secrets found based on that generated report and send an alert on Slack.