Skip to content
THREATWIRE

Open Source Tools · Category

Secrets detection

Scanners that find API keys, tokens and passwords committed to repositories, images and other storage.

Alternatives toGitGuardian

5 tools

  • Trivy

    All-in-one scanner for images, code, IaC and clusters

    Scanner from Aqua Security that finds vulnerabilities, misconfigurations, secrets and licences in container images, file systems, repositories and Kubernetes.

    Stars
    39k
    Forks
    776
    Last commit
    today
    Alternative toSnykPrisma Cloud+1
  • Gitleaks

    Secret scanner for Git repositories and files

    Fast secret scanner for Git history, directories and stdin, with regex and entropy rules for API keys, tokens and passwords.

    Stars
    30k
    Forks
    2.4k
    Last commit
    2 months ago
    MITOpen sourceSecrets detection
    Alternative toGitGuardian
  • Infisical

    Secrets, certificates and access management platform

    Open-core platform to manage application secrets and environment variables across teams and infrastructure, with SDKs, a CLI and secret scanning.

    Stars
    30k
    Forks
    2.4k
    Last commit
    today
    Alternative toHashiCorp Vault
  • TruffleHog

    Find, verify and analyse leaked credentials

    Secret scanner with hundreds of credential detectors that can verify whether a found key is live, across Git, cloud storage, chat and more.

    Stars
    29k
    Forks
    2.7k
    Last commit
    today
    AGPL-3.0-onlyOpen sourceSecrets detection
    Alternative toGitGuardian
  • Checkov

    Static analysis for infrastructure as code

    Policy-as-code scanner for Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and more, with graph-based checks across resources.

    Stars
    9.1k
    Forks
    1.4k
    Last commit
    6 days ago
    Apache-2.0Open sourceCloud and IaC security
    Alternative toPrisma CloudWiz+1