detect-secrets
https://github.com/yelp/detect-secrets
Python
An enterprise friendly way of detecting and preventing secrets in code.
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported1 Subscribers
Add a CodeTriage badge to detect-secrets
Help out
- Issues
- Scan files as UTF-8 instead of the platform locale
- docs: close quote in plugin-selection example
- Files that don't decode with the locale encoding are silently skipped (e.g. UTF-8 Cyrillic on Windows cp1252)
- audit: preserve occurrence boundaries when comparing baselines
- Prevent AWS verification from dropping findings on non-STS 403s
- Add a plugin for Nuntiq API keys
- Detect Slack xoxc tokens
- Find custom plugins registered after the secret-type mapping is cached
- Preserve baseline filters when forcing latest plugins
- Filter camelCase identifiers in the id-string heuristic
- Docs
- Python not yet supported