However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible, systematic means of:
Preventing new secrets from entering the code base,
Detecting if such preventions are explicitly bypassed, and
Providing a checklist of secrets to roll, and migrate off to a more secure storage.
Purpose of the Tool
detect-secrets is an aptly named module for (surprise, surprise) detecting secrets within a code base.
Tool Name
detect secrets
GitHub Repository
https://github.com/Yelp/detect-secrets
Type
Web VAPT
Additional Information
However, unlike other similar packages that solely focus on finding secrets, this package is designed with the enterprise client in mind: providing a backwards compatible, systematic means of:
Purpose of the Tool
detect-secrets is an aptly named module for (surprise, surprise) detecting secrets within a code base.