Introduction

Benchmarks of various tools for detecting secrets in git repositories.

Server:

• Intel Xeon E3-1270v6 - 4c/8t - 3.8 GHz/4.2 GHz
• 32 GB ECC 2400 MHz
• 2 × 450 GB SSD NVMe (SoftRaid)

Absolute (ms)

repos	noseyparker (v0.15.0)	gitleaks (v8.18.1)	trufflehog (2.2.1) (no-entropy)	trufflehog (3.63.2)
expired-creds	999.50	2,910.10	6,699.80	884.10
random-data-samples	32,985.90	256,553.00	1,123,970.50	22,139.10
gitleaks (repo)	887.40	5,777.10	61,506.30	602.90
puppeteer	44,840.20	2,326,351.90	908,091.00	2,747.10
deno	3,790.10	24,476.70	323,471.10	12,347.80
openssl	15,231.40	47,039.90	4,227,323.60	4,566.60
v8	73,255.80	400,464.60	7,318,095.30	11,415.90
linux	539,504.80	1,097,233.50	450,200,374.90	117,386.50
total	711,495.10	4,160,806.80	464,169,532.50	172,090.00
min	887.40	2,910.10	6,699.80	602.90
max	539,504.80	2,326,351.90	450,200,374.90	117,386.50
average	88,936.89	520,100.85	58,021,191.56	21,511.25

Relative

repos	noseyparker (v0.15.0)	gitleaks (v8.18.1)	trufflehog (2.2.1) (no-entropy)	trufflehog (3.63.2)
expired-creds	1.13	3.29	7.58	1.00
random-data-samples	1.49	11.59	50.77	1.00
gitleaks (repo)	1.47	9.58	102.02	1.00
puppeteer	16.32	846.84	330.56	1.00
deno	1.00	6.46	85.35	3.26
openssl	3.34	10.30	925.70	1.00
v8	6.42	35.08	641.04	1.00
linux	4.60	9.35	3,835.20	1.00
total	4.13	24.18	2,697.25	1.00
min	1.00	3.29	7.58	1.00
max	16.32	846.84	3,835.20	3.26
average	4.47	116.56	747.28	1.28