Join us

ContentUpdates and recent posts about detect-secrets..
Discovery IconThat's all about @detect-secrets — explore more posts below...
 Activity
sagar0041
@sagar0041 started using tool Jenkins , 32 minutes ago.
 Activity
sagar0041
@sagar0041 started using tool Kubernetes Dashboard , 33 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Jenkins , 7 hours, 32 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Azure Pipelines , 7 hours, 32 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Terragrunt , 7 hours, 35 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Terraform , 7 hours, 35 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Sonatype Nexus , 7 hours, 35 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool SonarQube , 7 hours, 35 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Snyk , 7 hours, 35 minutes ago.
 Activity
ishanupadhyay
@ishanupadhyay started using tool Red Hat OpenShift , 7 hours, 35 minutes ago.
Detect Secrets, created by Yelp Engineering, is a Python-based secret scanner designed for large, complex codebases. It uses a plugin architecture to detect high-risk secrets such as API keys, tokens, passwords, and certificates. The tool focuses on false-positive reduction by hashing baseline fingerprints, allowing teams to track only new or changed exposures over time. It integrates with CI pipelines, pre-commit hooks, and enterprise security workflows. Its extensible design and strong baseline mechanism make it popular in large engineering organizations that need scalable, low-noise secret detection.