GitGuardian/ggshield
Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security. observed · 2026-08-28
Health v2 · maintenance only
99/100
- Activity 99
- Release rhythm 99
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: 24
- age_days: 2326
- days_rel: 7
- days_push: 7
- n_releases_24m: 32
Adoption not part of the score
1992 stars · 216 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
ggshield is a CLI application from GitGuardian that detects over 500 types of hardcoded secrets in files, git history, and CI environments using GitGuardian's public scanning API. It integrates as a pre-commit hook, pre-push hook, GitHub Action, or standalone CLI to prevent credential leaks before code is pushed.
Use cases
- scan my repo for leaked api keys before pushing
- add a pre-commit hook that blocks commits containing secrets
- detect hardcoded credentials in CI pipeline
- check if my git history contains exposed tokens
- prevent developers from committing passwords and api keys
- scan files and directories for hardcoded secrets locally
When to choose
- you want to catch leaked secrets before they reach a remote repository
- you need broad detection coverage across 500+ secret types with validity checking
- you want pre-commit, pre-push, IDE, and CI integration from one tool
- you're okay with a cloud API doing the detection (files are not stored)
When to avoid
- you need fully offline secret scanning with no external API calls
- you can't or won't create a GitGuardian account/API key
- you need a self-hosted secrets detection backend without GitGuardian's platform
Facets
cli-tool · maturity active
security cli developer-tools ci-cd security developer-tools cli python cross-platform windows secrets-detection pre-commit-hook devsecops gitguardian api-key-scanning credential-scanning git-hooks devops command-line docker linux macos
9 sources
- readme: https://github.com/GitGuardian/ggshield · fetched 2026-08-28 · 395ed3e8b582
- homepage: https://gitguardian.com · fetched 2026-08-29 · 67c045d0e652
- site_page: https://www.gitguardian.com/about-us · fetched 2026-08-29 · 21022ae64ad9
- site_page: https://docs.gitguardian.com/ · fetched 2026-08-29 · 951b7cd32322
- site_page: https://api.gitguardian.com/docs · fetched 2026-08-29 · d19b9ee52779
- registry_pypi: https://pypi.org/pypi/ggshield/json · fetched 2026-08-29 · c03995b1894d
- site_page: https://www.gitguardian.com/integrations · fetched 2026-08-29 · 3450bd0c36f3
- site_page: https://www.gitguardian.com/pricing · fetched 2026-08-29 · ee1d82d33483
- site_page: https://www.gitguardian.com/faq · fetched 2026-08-29 · d5dcc376f555
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| GitGuardian/ggshield | main | 99 |
For agents
markdown · JSON · MCP: product_card(name="GitGuardian/ggshield")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem