Secrets Detection Python Packages

ggshield

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

pygitguardian

Python API client library for the GitGuardian API

whispers

Identify hardcoded secrets in static structured text (version 2)

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

armorer-guard

Fast local Rust scanner for AI-agent prompt injection, credential leaks, exfiltration, and risky tool calls

n0s1

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

aifence

Protect sensitive files from AI coding tools. One command to generate protection configs for Claude Code, Cursor, Copilot, and Windsurf.

tell-me-your-secrets

A simple module which finds files with different secrets keys present inside a directory

ludvig

Security scanner using YARA

nightfall

Python SDK for Nightfall

secpat2gf

convert secret patterns to gf compatible

rag-firewall

Client-side retrieval firewall for RAG systems — blocks prompt injection and secret leaks, re-ranks stale or untrusted content, and keeps all data inside your environment.

dotenv-secrets-scanner

Production-ready secrets scanner for Git repositories. Detects API keys, passwords, tokens, and credentials accidentally committed to source code.

wraith

Catches what your AI forgot to check. Deterministic linter for AI-generated Python code — hallucinated APIs, phantom packages, hardcoded secrets, taint analysis. 20 rules, zero config.

pygitguard

PyGitGuard is a Git security scanner designed to prevent accidental commits of sensitive data by scanning for:

gitshield-cli

GitShield — The Developer Guardian That Watches Your Code. Real-time secret detection, intelligent pre-commit checks, repo health scoring, and developer behavior intelligence.

noseyparker-explorer

Interactive results explorer and annotation tool for Nosey Parker

massgitleaks

Massgitleaks automates bulk secret scanning across multiple git repositories as a gitleaks wrapper with advanced reporting and pentester-friendly features.