Gitleaks

Gitleaks offers secret scanning for Git history and files for teams finding accidentally committed credentials before push.

Visit Gitleaks official site

What it does

It detects possible secrets in files and Git history.

When to use it

When finding accidentally committed credentials before push, test the pre-commit gate with a dummy key.

Trivy

Trivy offers container and infrastructure security scanning for teams checking container images before release.

  • security
  • scanning

Research

Semgrep

Semgrep offers code rule scanning and security analysis for teams finding risky patterns before code review.

  • security
  • scanning

Web Utility

Snyk

Snyk offers dependency and code security scanning for teams checking known risks in dependencies.

  • security
  • scanning

Web Utility