Ross ROSS = Recommend OSS · open-source software intelligence for agents

eth0izzle/shhgit

Ah shhgit! Find secrets in your code. Secrets detection for your GitHub, GitLab and Bitbucket repositories. observed · 2026-08-28

github.com/eth0izzle/shhgit · JavaScript · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

36/100

  • Activity 9
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 2554
  • days_rel: n/a
  • days_push: 551
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

3977 stars · 480 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

shhgit is a secrets detection tool that scans GitHub, GitLab, Bitbucket repositories and local directories for accidentally committed credentials like API tokens, passwords, and private keys. It runs as a CLI or via Docker with a live web interface, and can be integrated into CI pipelines.

Use cases

  • find leaked api keys in github repos
  • scan git repositories for committed secrets
  • detect hardcoded credentials before a breach
  • monitor public code hosting sites for exposed tokens
  • run secret scanning in ci pipelines
  • search for aws access keys in public code

When to choose

  • you need to scan public GitHub, GitLab, or Bitbucket code for leaked secrets
  • you want a self-hosted secret scanner with a live web dashboard
  • you want to integrate secret detection into local CI pipelines

When to avoid

  • you need actively maintained software - the project is explicitly no longer maintained
  • you need enterprise secret scanning with remediation workflows
  • you only target platforms other than GitHub, GitLab, or Bitbucket

Facets

cli-tool · maturity abandoned

security osint vulnerability-scanning secrets-management cli security osint developer-tools crawlers windows cli cross-platform secret-detection github gitlab bitbucket golang cyber-intelligence unmaintained linux macos docker

1 source

Member repositories

RepositoryRoleHealth v2
eth0izzle/shhgitmain36

For agents

markdown · JSON · MCP: product_card(name="eth0izzle/shhgit")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem