Tools
kingfisher
mongodb/kingfisher
Kingfisher is a fast secret scanner and credential response tool that detects leaked secrets, validates live credentials, maps blast radius, and supports revocation.
Topics
Related projects
trufflehog29.3kA secrets scanning tool that discovers, classifies, and verifies leaked credentials across Git repositories, filesystems, chats, and cloud storage.
ggshield2kggshield is a CLI that detects and validates 500+ types of hardcoded secrets in code, working as a pre-commit hook, CI check or GitHub Action to stop leaks early.
wrongsecrets1.5kOWASP WrongSecrets is a deliberately insecure application packed with challenges that show common secrets-management mistakes, built as hands-on training for developers and security teams.
git-hound1.5kGitHound is a command-line GitHub reconnaissance tool that combines dorks, regex matching and entropy checks to hunt for exposed API keys and credentials across public repositories, Gists and commit history.
trivy-action1.5kTrivy Action wraps the Trivy scanner as a GitHub Action so CI pipelines can scan container images, filesystems and infrastructure-as-code for vulnerabilities and upload SARIF reports.
gitleaks31kA fast CLI scanner that finds passwords, API keys, and tokens leaked in git repos, files, and CI pipelines.