techjacker/repo-security-scanner

Health v2 · maintenance only

Adoption not part of the score

1158 stars · 91 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Go CLI tool that scans a git repository's history for accidentally committed secrets such as passwords and private keys. It processes the output of `git log -p` and reports violations with commit, file, and reason, supporting false-positive filtering via a `.secignore` file.

Use cases

• find passwords committed to a git repo
• scan git history for leaked private keys
• audit repository for accidentally committed secrets
• check commits for hardcoded credentials before pushing
• filter false positives when scanning for secrets

When to choose

• you need a simple, fast CLI to scan full git history for secrets
• you want a lightweight single-binary tool with .secignore filtering
• you're doing a one-off security audit of a repo's commit history

When to avoid

• you need ongoing secret scanning integrated into CI with active maintenance and updates
• you need broad detection rules, allowlisting, or push protection like gitleaks or trufflehog
• you need notification/alerting features, which are still work in progress

Facets

cli-tool · maturity maintenance

security vulnerability-scanning cli developer-tools security developer-tools version-control windows cli cross-platform secrets-detection git-history-scanning gosecurity secignore command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="techjacker/repo-security-scanner")