tillson/git-hound

Health v2 · maintenance only

Adoption not part of the score

1451 stars · 204 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

GitHound is a Go-based CLI tool that hunts for exposed API keys, secrets, and credentials across all of GitHub using GitHub dorks, pattern matching, entropy analysis, and commit-history digging. It leverages GitHub's Code Search API to scan all public repositories and Gists, with JSON output and custom regex rules for automation pipelines.

Use cases

• find leaked API keys on GitHub
• scan GitHub for exposed credentials
• search commit history for deleted secrets
• run GitHub dorks to find sensitive files
• monitor GitHub for leaked secrets in bug bounty recon
• extract base64-encoded secrets from GitHub code

When to choose

• you need org-wide GitHub secret recon beyond specific repos
• you want to dig through commit history for reverted credentials
• you need JSON output for automated security pipelines
• you're doing bug bounty or OSINT reconnaissance on GitHub

When to avoid

• you only need to scan your own private repos locally
• you need a full secret-management vault rather than a scanner
• you can't provide a GitHub API token
• you need real-time pre-commit secret prevention rather than post-leak detection

Facets

cli-tool · maturity active

osint security search-engine cli security osint developer-tools penetration-testing windows cli cross-platform secret-scanning github-dorks bug-bounty recon leaked-credentials commit-history-analysis linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tillson/git-hound")