BishopFox/GitGot

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1571 stars · 217 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

GitGot is a semi-automated, feedback-driven CLI tool for searching public GitHub data (code and gists) for exposed sensitive secrets. Users prune noisy results via blacklists (filename, repo, username, or fuzzy content match) that can be saved and reused across sessions.

Use cases

• find leaked secrets on github for a domain
• search public github code for exposed credentials
• osint reconnaissance for sensitive data exposure
• scan gists for api keys related to an organization
• prune noisy secret search results with reusable blacklists

When to choose

• you want a human-in-the-loop GitHub secret search with fuzzy matching and resumable sessions
• you need to triage large result sets from GitHub code/gist searches for a domain or org
• you prefer a lightweight Python CLI with Docker support over heavier automated scanners

When to avoid

• you need fully automated continuous secret scanning integrated into CI/CD
• you want to scan private repositories or your own codebase rather than public GitHub data
• you need actively developed tooling with recent updates and broad platform support

Facets

cli-tool · maturity maintenance

osint search-engine security cli security osint developer-tools crawlers python cli windows secrets-detection github-search fuzzy-matching reconnaissance human-in-the-loop sensitive-data-exposure linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="BishopFox/GitGot")