
git-hound
Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.
code-analysisdevsecopsinformation-gathering+4
1.5k

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

Python script to scan Git repos for interesting strings

Pluggable linting tool to prevent committing credential.

Open-source secret scanner in Rust

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.


Authorized lab reproduction of CVE-2025-47928 (spotipy-dev/spotipy pull_request_target secrets exfiltration) — snapshot at vulnerable commit 4f5759d