Updates and recent posts about detect-secrets..

Posts
Description

Link

@anjali shared a link, 6 months, 2 weeks ago

Customer Marketing Manager, Last9

Instrumentation: Getting Signals In

See how instrumentation in OpenTelemetry helps track app issues, know the difference between auto and manual methods, and when to use them.

Activity

@devopslinks added a new tool Syft , 6 months, 3 weeks ago.

Activity

@kaptain added a new tool KubeLinter , 6 months, 3 weeks ago.

Activity

@devopslinks added a new tool Grype , 6 months, 3 weeks ago.

Activity

@kaptain added a new tool Hadolint , 6 months, 3 weeks ago.

Activity

@varbear added a new tool Bandit , 6 months, 3 weeks ago.

Activity

@devopslinks added a new tool JFrog Xray , 6 months, 3 weeks ago.

Activity

@devopslinks added a new tool OWASP Dependency-Check , 6 months, 3 weeks ago.

Activity

@varbear added a new tool pre-commit , 6 months, 3 weeks ago.

Activity

@devopslinks added a new tool GitGuardian , 6 months, 3 weeks ago.

Detect Secrets, created by Yelp Engineering, is a Python-based secret scanner designed for large, complex codebases. It uses a plugin architecture to detect high-risk secrets such as API keys, tokens, passwords, and certificates. The tool focuses on false-positive reduction by hashing baseline fingerprints, allowing teams to track only new or changed exposures over time. It integrates with CI pipelines, pre-commit hooks, and enterprise security workflows. Its extensible design and strong baseline mechanism make it popular in large engineering organizations that need scalable, low-noise secret detection.