oam/knowledge base/detect-secrets.md

detect-secrets

Python module for detecting secrets within code bases.

1. TL;DR
2. Further readings
   1. Sources

TL;DR

Setup

brew install 'detect-secrets'
pip install 'detect-secrets'

Usage

detect-secrets scan
detect-secrets scan --exclude-lines 'password = (blah|fake)' --exclude-files '.*\.signature$'

Further readings

• Main repository

Alternatives:

• gitleaks
• ripsecrets
• trufflehog

Sources