Alternatives to detect-secrets
A command-line tool from Yelp that detects and prevents secrets such as keys being committed to code. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
detect-secrets
A command-line tool from Yelp that detects and prevents secrets such as keys being committed to code.
Replacements
Listings that take over the same core job as detect-secrets.
Gitleaks
Scans Git repositories, files and pipelines for leaked secrets.
Gitleaks scans full commit history as well as files and pipelines, running as a pre-commit hook or CI step with configurable rules.
TruffleHog
Find exposed credentials in repositories and other data sources.
TruffleHog finds exposed credentials across repositories and other data sources, with some verification features that contact external services.
Similar software
Related functionality, not a direct replacement.
