taksh1507

taksh1507/secret-guard

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

0 stars 0 forks 0 watchers Python MIT License
ci cli devsecops hacktoberfest pre-commit python secret-scanner security security-tools
View on GitHub Website
26 Open Issues Need Help Last updated: Aug 16, 2026

Open Issues Need Help

View All on GitHub
Phase 3: Egress & CI Guardrails (policy gates, pre-commit/pre-push, notification hooks) 27 days ago
enhancement help wanted security devops ci-cd difficulty: medium complexity: high priority: high v1.0-part3
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Phase 4: Explainability, Shareable Reports & Marketing (report html/md/json/sarif, dashboard site, badge, docs) 27 days ago
documentation enhancement help wanted difficulty: medium complexity: medium priority: high v1.0-part4
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Phase 2: Git-History Leak & Ownership Attribution (secret-guard history, leak-age, blame-aware owners, dedupe) 27 days ago
enhancement help wanted security difficulty: hard complexity: high priority: high v1.0-part2
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Phase 1: Intelligence Engine + secret-guard doctor (per-rule intel cards, risk scoring, remediation walkthrough) 27 days ago
enhancement help wanted security difficulty: hard complexity: high priority: high v1.0-part1
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Flagship: Secret Lifecycle Intelligence — rule intel, git-history tracking, policy gates, shareable reports 27 days ago
enhancement help wanted security difficulty: hard complexity: high priority: high
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Custom rule manifests 29 days ago
enhancement good first issue hacktoberfest
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add --stdin support to scan piped input about 1 month ago
enhancement good first issue hacktoberfest difficulty: easy complexity: low
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add --max-findings to cap scan output and exit behavior about 1 month ago
enhancement good first issue hacktoberfest devops difficulty: easy complexity: low
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
GitHub Action: post scan findings as a PR comment about 1 month ago
enhancement help wanted hacktoberfest ci-cd difficulty: hard complexity: high
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Document GitLab CI and Azure Pipelines integration about 1 month ago
documentation good first issue hacktoberfest devops difficulty: easy complexity: low
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add fuzz testing for detection rules about 1 month ago
enhancement help wanted hacktoberfest security difficulty: hard complexity: high
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add --severity flag to fail scans only past a severity threshold about 1 month ago
enhancement good first issue hacktoberfest devops difficulty: easy complexity: low
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add detection rules for Slack, Stripe, Shopify tokens about 1 month ago
enhancement good first issue hacktoberfest security difficulty: easy complexity: low
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Roadmap: remaining features with difficulty/complexity triage about 1 month ago
documentation enhancement help wanted hacktoberfest difficulty: hard complexity: high priority: high
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Docker image published to GHCR about 1 month ago
enhancement help wanted devops ci-cd
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Colored output + stable JSON schema about 1 month ago
enhancement good first issue hacktoberfest
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add detection rules for more providers (npm, SendGrid, Twilio, …) about 1 month ago
enhancement good first issue hacktoberfest security
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Contributor onboarding: CONTRIBUTORS.md + 'Your first PR' guide about 1 month ago
documentation good first issue hacktoberfest
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Documentation site / GitHub Pages landing page about 1 month ago
enhancement good first issue hacktoberfest
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Auto-generated CHANGELOG and release notes about 1 month ago
enhancement good first issue hacktoberfest
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Adversarial + real-world fixture test corpus about 1 month ago
enhancement good first issue hacktoberfest security
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Parallelize scanning for large repos about 1 month ago
enhancement help wanted performance
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Robust .env parsing (quotes, export, comments, interpolation) about 1 month ago
enhancement good first issue hacktoberfest security
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
One-line GitHub Action for CI integration about 1 month ago
enhancement help wanted hacktoberfest devops ci-cd
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
SARIF output for GitHub Code Scanning about 1 month ago
enhancement help wanted hacktoberfest security ci-cd
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools
Add support for scanning git history for leaked secrets about 1 month ago
enhancement help wanted hacktoberfest security
taksh1507/secret-guard
0

Open-source Python secret scanner: detect leaked API keys, AWS keys, GitHub tokens, passwords and private keys before they reach git history. Zero-dependency, CI-ready, pre-commit ready. An open alternative to gitleaks and trufflehog.

Python
#ci#cli#devsecops#hacktoberfest#pre-commit#python#secret-scanner#security#security-tools