Alternative tools about ripsecrets HOT 6 CLOSED

👋🏻 I maintain gitleaks which is a comparable tool. Nice work!

https://github.com/zricethezav/gitleaks

from ripsecrets.

@zricethezav I was not aware of gitleaks, just added!

from ripsecrets.

I took a look at ggshield and decided not to add it since it required an API key to use. I'm not opposed to commercial products but probably not the same class as the other recommended tools.

from ripsecrets.

Thanks for sharing those! I was aware of git-secrets but not repo-security-scanner. However I wouldn't want to recommend either based on my understanding of what they do.

git-secrets doesn't come pre-programmed with a set of common secrets except for a few AWS specific ones, so it's going to miss a lot of common secret types unless each user spends time configuring it.

From what I can tell repo-security-scanner is just scanning filenames, not file contents, so it's not technically doing the same thing.

from ripsecrets.

Fair enough. :)

from ripsecrets.

From hacker news: https://github.com/GitGuardian/ggshield

from ripsecrets.