HNGlance

Top Best New Show

Secrets: A command-line tool to prevent committing secret keys into your source

https://github.com/sirwart/secrets

by todsacerdoti • 4 years ago

31 5 4 years ago

GI

Related Stories

Loading related stories...

Comments

5

stouset• 4 years ago

You might want to pick a different name since it collides with my already-published crate.

https://crates.io/crates/secrets

s09dfhks• 4 years ago

interesting that the author defines a list of pre-defined secrets to scan for

https://github.com/sirwart/secrets/blob/main/src/find_secret...

Why no check for AWS keys?

SirWart• 4 years ago

I actually did have a check for AWS keys earlier today, but as far as I can tell all the AWS keys with well defined prefixes are key IDs and not true secrets. It will still pick up AWS keys with the random string detection.

copperroof• 4 years ago

AWS has their own as well https://github.com/awslabs/git-secrets

cwinq• 4 years ago

you may also want to look at ggshield: https://github.com/GitGuardian/ggshield

Source preview

github.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms