Secret Scanning
Find credentials, tokens and keys committed to code or exposed in build systems.
9 tools profiled
How it differs Finds credentials committed to code, git history and build artifacts. Vulnerable dependencies are SCA, not this.
Thoughtworks
Git hook from Thoughtworks that inspects outgoing changes for credential-shaped content, risky filenames and high entropy strings, and refuses the commit or push.
Gitleaks
Go command line scanner that walks git history and file trees against a TOML rule set, combining regular expressions with entropy thresholds to find committed secrets.
Yelp
Python secret scanner built around a baseline file, so teams can block new credentials from entering a repository without first cleaning up every historical finding.
Thoughtworks
Git hook from Thoughtworks that inspects outgoing changes for credential-shaped content, risky filenames and high entropy strings, and refuses the commit or push.
Gitleaks
Go command line scanner that walks git history and file trees against a TOML rule set, combining regular expressions with entropy thresholds to find committed secrets.
Yelp
Python secret scanner built around a baseline file, so teams can block new credentials from entering a repository without first cleaning up every historical finding.