git-all-secrets scans GitHub repositories and gists for secrets, utilizing tools like truffleHog and repo-supervisor. The tool aims to consolidate information from multiple sources to identify potential vulnerabilities related to exposed credentials or sensitive data. It overcomes limitations of individual scanning tools by combining outputs from several sources.
The project supports scanning organizations, individual users, and specific repositories or gists. It can incorporate multiple scanning tools to provide a more complete assessment. The tool supports scanning GitHub Enterprise repositories with optional parameters. It offers options for filtering data and merging results from multiple tools.
- Organization Scanning: Scans public repositories and user gists within a specified organization.
- User Scanning: Scans public repositories and user gists of a specified user.
- Repository/Gist Scanning: Scans a single specified repository or gist.
- Multiple Tools: Utilizes truffleHog and repo-supervisor for comprehensive secret detection.
- GitHub Enterprise Support: Includes options for scanning GitHub Enterprise repositories.
- Configurable Output: Allows specifying the output file for results.
- Output Merging: Merges and deduplicates results from multiple scanning tools.
The project is actively maintained and has a reasonable level of community interest based on its GitHub statistics. Recent commits suggest ongoing development and bug fixes. Documentation is present, although the completeness of all features is not fully documented. The project's stability is influenced by the underlying tools (truffleHog and repo-supervisor).
This tool benefits security professionals and developers seeking to identify and mitigate potential security risks associated with exposed secrets in code and configuration. It addresses the need for a centralized solution to scan various GitHub resources, offering a comprehensive and efficient approach to secret detection compared to manual scanning or relying on individual tools.