TruffleHog
Finds and verifies leaked secrets in repositories and other sources.
CLIOpen source
Searches repositories, buckets and other sources for credentials and tries to verify whether they are still active, reducing false positives.
When to use
When you want to scan for secrets and know which ones still work.
When to avoid
In environments where testing credentials against external services is not allowed.
Alternatives
They do a similar job. Compare before choosing.
Detects leaked secrets in code and Git history.
CLIOpen source★ 30.5K
Related
From the same area, with a close purpose.
GitHub's native dependency updates and alerts.
ServiceFree