Tools
ggshield
GitGuardian/ggshield
ggshield is a CLI that detects and validates 500+ types of hardcoded secrets in code, working as a pre-commit hook, CI check or GitHub Action to stop leaks early.
Topics
Related projects
kingfisher1.3kKingfisher is a fast secret scanner and credential response tool that detects leaked secrets, validates live credentials, maps blast radius, and supports revocation.
trufflehog29.3kA secrets scanning tool that discovers, classifies, and verifies leaked credentials across Git repositories, filesystems, chats, and cloud storage.
trivy-action1.5kTrivy Action wraps the Trivy scanner as a GitHub Action so CI pipelines can scan container images, filesystems and infrastructure-as-code for vulnerabilities and upload SARIF reports.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.
RustScan20.7kA modern, fast port scanner that can scan all 65,535 ports in seconds and pipe results into Nmap or custom scripts.
fscan14.8kFscan is an intranet comprehensive scanning tool that combines host discovery, port scanning, service fingerprinting, weak-password brute force, vulnerability detection and exploitation. It runs from the command line and can also be embedded as a Go SDK.