awslabs/git-secrets

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

13380 stars · 1253 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

git-secrets is a command-line tool that scans git commits, commit messages, and merge histories for secrets and credentials, rejecting commits that match prohibited patterns. It ships with built-in AWS credential detection and supports custom secret providers and regex patterns.

Use cases

• prevent committing AWS keys to git
• scan repo history for leaked passwords
• add pre-commit hook to block secrets
• check repository before making it public
• scan for custom credential patterns

When to choose

• you want a lightweight git hook-based guard against committing secrets
• you primarily need AWS credential detection
• you need to audit full git history for leaked credentials

When to avoid

• you need broad multi-cloud secret scanning with many built-in providers
• you want CI-side scanning rather than local git hooks
• you need active maintenance with frequent updates

Facets

cli-tool · maturity stable

security vulnerability-scanning version-control developer-tools security version-control developer-tools windows cli git-hooks secrets-detection aws-credentials pre-commit credential-scanning linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="awslabs/git-secrets")