# securing/DumpsterDiver

Tool to search secrets in various filetypes.

Repository: https://github.com/securing/DumpsterDiver
Canonical: https://ross.abutalabs.com/products/dumpsterdiver
Language: Python
License: MIT
License Family: permissive
Archived: true
Last push: 2023-04-25T18:57:56+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3020, "days_push": 1226, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, archived
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1036, forks 154 (observed 2026-08-28T04:03:19.264246+00:00)

## What it is
DumpsterDiver is a Python command-line tool that scans large volumes of files for hardcoded secrets such as AWS, Azure, and SSH keys as well as passwords. It uses Shannon Entropy, searches git logs, unpacks compressed archives, and supports customizable search rules via YAML configuration.

## Use cases
- find hardcoded secrets in a folder of files
- scan git repositories for leaked keys and passwords
- detect AWS or SSH keys accidentally committed to code
- search compressed archives for sensitive credentials
- apply custom rules to find files with many email addresses
- clean up files that contain no secrets during analysis

## When to choose
- you need to audit local file dumps or git history for leaked credentials
- you want a customizable, rule-based secret scanner with entropy detection
- you need to unpack archives and scan their contents for secrets

## When to avoid
- you need real-time CI/CD secret scanning integrated into pull requests
- you want a maintained tool with frequent updates and broad platform support
- you need network-based or cloud repository scanning rather than local paths

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, search-engine, developer-tools
- domain: security, penetration-testing, developer-tools, files
- platform: python, cli, windows
- tags: secrets-detection, secret-scanning, entropy-analysis, hardcoded-credentials, git-history-scanning, archive-unpacking, linux, macos

## Member repositories
- securing/DumpsterDiver (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:19.264246+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:04:42.983201+00:00, confidence not recorded.
  - readme: https://github.com/securing/DumpsterDiver (fetched 2026-08-28T04:03:19.264246+00:00, sha 13007949e201)
- Data as of 2026-08-30T08:39:29.467469+00:00.