TruffleHog

TruffleHog offers secret detection for repositories and storage for teams locating exposed API keys.

Visit TruffleHog official site

What it does

It finds credential risks across repositories and other sources.

When to use it

When locating exposed API keys, limit access before checking credential validity.

Semgrep

Semgrep offers code rule scanning and security analysis for teams finding risky patterns before code review.

  • security
  • scanning

Web Utility

Snyk

Snyk offers dependency and code security scanning for teams checking known risks in dependencies.

  • security
  • scanning

Web Utility

SonarQube

SonarQube offers code quality and security analysis for teams tracking duplication and defect risks in a project.

  • security
  • scanning

Web Utility