Find leaked secrets across code and full Git history

noseyparker scans textual data for secrets and sensitive information. Point it at a file, a directory, or a Git repository and it applies a library of detection rules, surfacing API keys, tokens, and credentials wherever they appear. It reads full Git history, not only the current tree, so secrets that were committed and later removed still get caught.

It is built to scan a lot of code quickly. Run many parallel jobs with --jobs, clone and scan a repository straight from a URL with --git-url, or sweep every accessible repo for a GitHub user or organization through the GitHub API. Custom rule files, path-based ignore files, and a configurable max file size tune the scan to a codebase instead of drowning you in noise.

On Trickest, noseyparker is a Static Code Analysis node that takes a file, directory, or Git source and writes a file and a folder of results. Run it across a repository or an organization's repos to catch leaked credentials before an attacker does, and route the matches into a report or alert.