discovered 04 Aug 2026
secret-scan
→ View on GitHubSecret-scan is a high-performance secret detection tool designed for scanning codebases to identify and remediate exposed credentials, API keys, and sensitive information, thereby helping to prevent security vulnerabilities. Key features include parallel scanning for enhanced speed, support for over 30 secret types through advanced entropy analysis and regex pattern matching, customization options for detection rules, and multiple output formats. The tool operates with zero configuration by default, respects `.gitignore` files, and ensures production readiness with 100% test coverage.