sottlmarek / DevSecOps

Ultimate DevSecOps library
MIT License
5.76k stars 1.01k forks source link

Update README.md – add ggshield #21

Closed ziadghalleb closed 2 years ago

ziadghalleb commented 2 years ago

Add ggshield to the list of secret scanning tools. GitGuardian's CLI ggshield detects secrets in plain text files, source code/git repositories, CI pipelines, and Docker images. It can be configured to run with pre-commit or pre-push hooks for developers to prevent committing secrets in their git repositories.

sottlmarek commented 2 years ago

Hello Ziad, is ggshield for free and fully opensourced?

ziadghalleb commented 2 years ago

Hey Marek,

sottlmarek commented 2 years ago

Hey Marek,

  • ggshield the CLI and py-gitguardian the python API client it wraps are open-source. The secret scanning libraries however are not.
  • Scanning is available with a quota of 1,000 calls/month for the free plan (teams with 25 developers or less).

In this case it is fine. If the product will not have free or open-source part, I will need to remove it or move it to commercial tools section that is on the way for future improvements.