detect-secrets logo


An enterprise friendly way of detecting and preventing secrets in code, by Yelp
+ 1

What is detect-secrets?

detect-secrets is an aptly named module for (surprise, surprise) detecting secrets within a code base. However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible, systematic means of: Preventing new secrets from entering the code base, Detecting if such preventions are explicitly bypassed, and Providing a checklist of secrets to roll, and migrate off to a more secure storage.
detect-secrets is a tool in the Secrets Detection category of a tech stack.
detect-secrets is an open source tool with 2.3K GitHub stars and 285 GitHub forks. Here’s a link to detect-secrets's open source repository on GitHub

Who uses detect-secrets?


7 developers on StackShare have stated that they use detect-secrets.

detect-secrets Integrations

detect-secrets Alternatives & Comparisons

What are some alternatives to detect-secrets?
The first platform scanning all GitHub public activity in real time for API secret tokens, database credentials or vault keys. Be alerted in seconds. Integrate in minutes.

detect-secrets's Followers
10 developers follow detect-secrets to keep up with related blogs and decisions.