dev-vcs/gitleaks::bentoo
- Ebuilds: 1, Testing: 8.30.1 Description:
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets
like passwords, API keys, and tokens in git repositories. It is an
easy-to-use, all-in-one solution for finding secrets, past or present,
in code, scanning git logs, files, directories, and stdin.
Homepage:https://github.com/gitleaks/gitleaks License: MIT Apache-2.0 BSD BSD-2 ISC MPL-2.0
dev-vcs/trufflehog::bentoo
- Ebuilds: 1, Testing: 3.98.1 Description:
TruffleHog scans for leaked credentials in git history, filesystems,
S3 buckets, container images and many other sources. What sets it
apart from a pure pattern matcher is verification: for hundreds of
credential types it calls the provider to check whether the secret is
still live, which separates a real incident from a rotated key. It
complements dev-vcs/gitleaks rather than replacing it, the latter
being the lighter pre-commit-shaped option.
Homepage:https://github.com/trufflesecurity/trufflehog License: AGPL-3 Apache-2.0 BSD BSD-2 CC0-1.0 ISC LGPL-3 MIT MPL-2.0 public-domain