Find API keys in your code. 🔑
Go
Switch branches/tags
Nothing to show
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
vendor/github.com Test submodules for dependencies. Jul 11, 2016
.gitignore Test submodules for dependencies. Jul 11, 2016
.gitmodules Test submodules for dependencies. Jul 11, 2016
LICENSE Create LICENSE Jan 22, 2018
README.md go get Jul 12, 2016
main.go gofmt Jul 1, 2016

README.md

secrets-scanner

Find API tokens and other secrets in your code.

Example: Search Git history including commit messages:

$ go get -u github.com/stefansundin/secrets-scanner
$ cd $GOPATH/src/github.com/stefansundin/secrets-scanner
$ go build
$ git log -p | ./secrets-scanner
Found Redis URLs:
- 'redis://h:1i0647a29e4qsp3iefbttnhnca3@example.com:11141'

Use -test to test the found keys automatically. Not supported for all services.

$ git log -p | ./secrets-scanner -test
Found Redis URLs:
- 'redis://h:1i0647a29e4qsp3iefbttnhnca3@example.com:11141'
Connection failed: dial tcp 93.184.216.34:11141: i/o timeout

Supported

  • AWS Access Key ID
  • Google Access Token
  • Google API key
  • Slack xoxp and xoxb tokens
  • Redis URLs
  • Gemfury URLs