secretsweep

https://github.com/Majd2404/SecretSweep

SecretSweep scans a codebase (and optionally its full git history) for leaked secrets — API keys, tokens, private keys — using a combination of known-format regex patterns and Shannon entropy analysis for unknown formats. Pure Ruby standard library, zero runtime dependencies.