Lightweight Python script to scan files, directories, or git diffs for potential secrets before they hit your repository. Built-in detectors catch AWS keys, generic tokens, PEM blocks, and high-entropy strings, with support for custom allowlists and rule tuning.
- Recursive scanning of directories and single files.
- Git diff mode (
--git-diff
) for pre-commit / pre-push hooks. - AWS access/secret keys, private keys, generic tokens, and JWTs out of the box.
- Shannon entropy detector for suspicious high-entropy strings.