- Home
- Secrets Scanning Software
- Git Secret Scanner
On the recordRead 5 Oct 202613 facts
Git Secret Scanner
Plans and prices
Git Secret Scanner
Free
MIT licensed · free for commercial and personal use
Read 5 Oct 2026 · github.com
On the record
- Coverage
- It lists patterns for credentials and tokens including AWS, GCP, Azure, GitHub, Slack, Stripe, JWT, SSH/PEM keys, and database URIs.github.com · read 5 Oct 2026
- Detection
- The README describes pattern matching, Shannon entropy analysis, context scoring, and denylist filtering to reduce false positives.github.com · read 5 Oct 2026
- Integrations
- The README provides GitHub Actions and GitLab CI examples and documents SARIF upload to GitHub Advanced Security.github.com · read 5 Oct 2026
- License
- The repository states that the tool is MIT licensed and may be used and modified for personal or commercial projects.github.com · read 5 Oct 2026
- Limits
- The documented defaults include a 10 MB maximum file size, local scan depth of 10, and concurrency of 5 repositories and 50 files.github.com · read 5 Oct 2026
- Purpose
- Git Secret Scanner detects hardcoded credentials in GitHub organizations and local filesystems.github.com · read 5 Oct 2026
- Remediation
- Findings can include severity, immediate actions, prevention steps, provider-specific rotation commands, and documentation links.github.com · read 5 Oct 2026
- Reports
- It exports findings as JSON, CSV, or SARIF, with SARIF described as compatible with GitHub Advanced Security, Azure DevOps, GitLab Security Dashboard, and SonarQube.github.com · read 5 Oct 2026
- Requirements
- Installation requires Python 3.8+ and Git 2.20+; GitHub organization scanning requires a GitHub token and organization name.github.com · read 5 Oct 2026
- Security behavior
- The scanner says it does not attempt to authenticate with or test detected credentials; matches require manual verification.github.com · read 5 Oct 2026
- Security handling
- The security guidance says findings are masked in logs and advises encrypting reports that contain finding details.github.com · read 5 Oct 2026
- Who it is for
- The README lists security teams, DevOps/SRE, developers, and compliance teams as use cases.github.com · read 5 Oct 2026
