# BishopFox/GitGot

Semi-automated, feedback-driven tool to rapidly search through troves of public data on GitHub for sensitive secrets.

Repository: https://github.com/BishopFox/GitGot
Canonical: https://ross.abutalabs.com/products/gitgot
Language: Python
License: LGPL-3.0
License Family: copyleft
Topics: security-tools, security, security-scanner, github-api, fuzzy-matching, python, sensitive-data-exposure, osint, reconnaissance, recon, gists, gist-search
Last push: 2024-03-07T13:48:48+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2637, "days_push": 909, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1571, forks 217 (observed 2026-08-28T04:05:05.315167+00:00)

## What it is
GitGot is a semi-automated, feedback-driven CLI tool for searching public GitHub data (code and gists) for exposed sensitive secrets. Users prune noisy results via blacklists (filename, repo, username, or fuzzy content match) that can be saved and reused across sessions.

## Use cases
- find leaked secrets on github for a domain
- search public github code for exposed credentials
- osint reconnaissance for sensitive data exposure
- scan gists for api keys related to an organization
- prune noisy secret search results with reusable blacklists

## When to choose
- you want a human-in-the-loop GitHub secret search with fuzzy matching and resumable sessions
- you need to triage large result sets from GitHub code/gist searches for a domain or org
- you prefer a lightweight Python CLI with Docker support over heavier automated scanners

## When to avoid
- you need fully automated continuous secret scanning integrated into CI/CD
- you want to scan private repositories or your own codebase rather than public GitHub data
- you need actively developed tooling with recent updates and broad platform support

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: osint, search-engine, security, cli
- domain: security, osint, developer-tools, crawlers
- platform: python, cli, windows
- tags: secrets-detection, github-search, fuzzy-matching, reconnaissance, human-in-the-loop, sensitive-data-exposure, linux, macos, docker

## Member repositories
- BishopFox/GitGot (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:05.315167+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:58:25.141575+00:00, confidence not recorded.
  - readme: https://github.com/BishopFox/GitGot (fetched 2026-08-28T04:05:05.315167+00:00, sha 552197533809)
- Data as of 2026-08-30T08:39:29.467469+00:00.