Skip to content
A tool to find sensitive keys and passwords in Travis logs
Branch: master
Clone or download
Latest commit ff17177 Jun 3, 2019
Type Name Latest commit message Commit time
Failed to load latest commit information. Update Jun 3, 2019 Added user not found exception May 27, 2019
wordlist.txt Moved all the lines to a separate wordlist.txt file May 18, 2019

TravisLeaks 🚀

A tool to find sensitive keys and passwords in Travis logs

travis gif


Read the Blog post here

Just enter the Travis user name of the organization. The script will automatically find out all jobs and then do two things:

  1. Look for ED's keywords for potential leaks
  2. Use the concept of entropy to find potential API keys in the logs

Requirements (using script)

Python 3.X
pip install requests


python travis_user_name




The keywords for the potential leak was taken from ED's blog post here

The concept of entropy was adapted from here


This tool still needs a lot of development. I would be glad if someone would like to contribute to this project.


  • Better output format
  • Support CircleCI scans
You can’t perform that action at this time.