
tartufo
Searches through git repositories for high entropy strings and secrets, digging deep into commit history
code-analysisdevsecopssecret-detection+1
516

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

Detects CVE-2026-45321 (TanStack supply chain compromise) and Mini Shai-Hulud worm artifacts. Scans node_modules, lockfiles, persistence hooks…

This tool is used to find shell history leaking

Nosey Parker is a command-line tool that finds secrets and sensitive information in textual data and Git history.

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.