AppSecNews

Secret Scanning

Secret Scanning

Find credentials, tokens and keys committed to code or exposed in build systems.

9 tools profiled

How it differs Finds credentials committed to code, git history and build artifacts. Vulnerable dependencies are SCA, not this.

2 tools match

Sort

Active Git Clear all

git-secrets

AWS Labs

Secret Scanning

Shell-based git hook that refuses commits matching a configured set of credential patterns, with built-in rules for AWS access keys.

Open source

Established Compare git-secrets
Talisman

Thoughtworks

Secret Scanning

Git hook from Thoughtworks that inspects outgoing changes for credential-shaped content, risky filenames and high entropy strings, and refuses the commit or push.

Open source

Established Compare Talisman

git-secrets

AWS Labs

Shell-based git hook that refuses commits matching a configured set of credential patterns, with built-in rules for AWS access keys.

Open source Established

Secret Scanning Compare git-secrets
Talisman

Thoughtworks

Git hook from Thoughtworks that inspects outgoing changes for credential-shaped content, risky filenames and high entropy strings, and refuses the commit or push.

Open source Established

Secret Scanning Compare Talisman

Pick at least one more