Ross ROSS = Recommend OSS · open-source software intelligence for agents

securing/DumpsterDiver

Tool to search secrets in various filetypes. observed · 2026-08-28

github.com/securing/DumpsterDiver · Python · MIT (permissive) · archived observed · 2026-08-28

Health v2 · maintenance only

10/100

  • Activity 0
  • Release rhythm 35
  • Longevity 100

Flags: no_releases archived

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3020
  • days_rel: n/a
  • days_push: 1226
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1036 stars · 154 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DumpsterDiver is a Python command-line tool that scans large volumes of files for hardcoded secrets such as AWS, Azure, and SSH keys as well as passwords. It uses Shannon Entropy, searches git logs, unpacks compressed archives, and supports customizable search rules via YAML configuration.

Use cases

  • find hardcoded secrets in a folder of files
  • scan git repositories for leaked keys and passwords
  • detect AWS or SSH keys accidentally committed to code
  • search compressed archives for sensitive credentials
  • apply custom rules to find files with many email addresses
  • clean up files that contain no secrets during analysis

When to choose

  • you need to audit local file dumps or git history for leaked credentials
  • you want a customizable, rule-based secret scanner with entropy detection
  • you need to unpack archives and scan their contents for secrets

When to avoid

  • you need real-time CI/CD secret scanning integrated into pull requests
  • you want a maintained tool with frequent updates and broad platform support
  • you need network-based or cloud repository scanning rather than local paths

Facets

cli-tool · maturity maintenance

security search-engine developer-tools security penetration-testing developer-tools files python cli windows secrets-detection secret-scanning entropy-analysis hardcoded-credentials git-history-scanning archive-unpacking linux macos

1 source

Member repositories

RepositoryRoleHealth v2
securing/DumpsterDivermain10

For agents

markdown · JSON · MCP: product_card(name="securing/DumpsterDiver")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem