Ross ROSS = Recommend OSS · open-source software intelligence for agents

hisxo/gitGraber

gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe... observed · 2026-08-28

github.com/hisxo/gitGraber · Python · GPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

66/100

  • Activity 74
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2555
  • days_rel: n/a
  • days_push: 160
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

2376 stars · 356 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

gitGraber is a Python3 command-line tool that monitors GitHub search results in real time to find leaked sensitive data such as API keys and tokens for services like AWS, PayPal, Stripe, Mailgun, and Twilio. It sends findings to Slack notifications or the CLI and deduplicates previously scanned repositories.

Use cases

  • monitor github for leaked api keys in real time
  • find exposed secrets for bug bounty hunting
  • detect credential leaks for my company keyword
  • get slack alerts when api tokens are pushed to github
  • osint reconnaissance for red team engagements

When to choose

  • you want real-time monitoring of newly indexed GitHub files rather than historical repo scanning
  • you need Slack notifications for leaked service-specific tokens
  • you run bug bounty or red team recon and want low false-positive secret detection

When to avoid

  • you need to scan the full history of existing repositories - other tools do that better
  • you want zero false positives without tuning regexes and blacklist patterns
  • you need a GUI or managed SaaS secret-scanning solution

Facets

cli-tool · maturity active

osint security web-scraping monitoring search-engine security osint developer-tools crawlers python cli windows secret-detection github-monitoring leak-detection bugbounty api-keys slack-notifications real-time linux macos

1 source

Member repositories

RepositoryRoleHealth v2
hisxo/gitGrabermain66

For agents

markdown · JSON · MCP: product_card(name="hisxo/gitGraber")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem