Find API tokens and other secrets in your code.
Example: Search Git history including commit messages:
$ git clone https://github.com/stefansundin/secrets-scanner.git
$ cd secrets-scanner
$ go build
$ git log -p | ./secrets-scanner
Found Redis URLs:
- 'redis://h:[email protected]:11141'
Use -test to test the found keys automatically. Not supported for all services.
$ git log -p | ./secrets-scanner -test
Found Redis URLs:
- 'redis://h:[email protected]:11141'
Connection failed: dial tcp 93.184.216.34:11141: i/o timeout
- AWS Access Key ID
- Google Access Token
- Google API key
- Slack
xoxpandxoxbtokens - Redis URLs
- Gemfury URLs
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent