AWS Lab's git-secrets

AWS Lab's git-secrets: Prevents Secret Leaks in Git Repositories

A tool to scan commits, histories, and files for known patterns of secrets or credentials, helping prevent developers from checking in sensitive information into public git repositories.

What is AWS Lab's git-secrets?

AWS Lab's git-secrets is an open source tool that helps prevent developers from accidentally committing secrets and credentials into public git repositories. It works by scanning commits, commit histories, and files in the repository to detect known patterns of secrets, keys, access tokens, or passwords.

When git-secrets detects credential leaks or unencrypted secrets in the code, it prevents the changes from being committed to the repository. It alerts the developer that sensitive information has been found, allowing them to remove it before check-in.

Some key features of AWS Lab's git-secrets include:

• Scans commits, commit histories and files for secrets
• Supports public key detectors to search for private keys
• Extendable with custom secret patterns
• Prevents check-in of commits with secrets
• Integrates with common services like AWS, Google Cloud, Azure, GitHub, etc.
• Easy installation as a pre-commit git hook
• Acts as safety check for CI/CD pipelines
• Open source tool with ongoing development

Overall, git-secrets helps enforce security best practices and prevent accidental leaks of API keys, tokens, passwords or other sensitive data into public repositories. It is useful for security-conscious teams and organizations.

AWS Lab's git-secrets Features

Official Links