search

boringtools / git-alerts

Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
Apache License 2.0
196 stars 6 forks source link

password not found #19

Closed or-akl closed 10 months ago

or-akl commented 10 months ago

Hi, i tried git-alerts detect --org command which didn't find any secrets.

c0d3G33k commented 10 months ago

Hi @or-akeyless, probably the organization you scanned might not have any valid secrets. GitAlerts usage TruffleHog only verified option to detect the secrets Reference: https://github.com/trufflesecurity/trufflehog?tab=readme-ov-file#1-scan-a-repo-for-only-verified-secrets

Please don't hesitate to raise another issue if you need to support a customizable secrets detection feature.