{
  "id": "detectsecrets",
  "name": "detect-secrets",
  "category": "detector",
  "doc": "detect-secrets is an open-source (Apache-2.0) secret scanner from Yelp, built to stop new secrets from entering a code base: it records known findings in a baseline file and is usually run as a pre-commit hook. Its plugins find secrets with service-specific regular expressions, with keywords such as password in assignments and with string entropy, and some plugins can verify a secret with the service. The plugins are in detect_secrets/plugins/ of the repository; the list of supported types covers only the registry datatypes that match a plugin.",
  "website": "https://github.com/Yelp/detect-secrets",
  "supported_types": [
    "aws_access_key_id",
    "aws_secret_access_key",
    "azure_storage_account_key",
    "github_token",
    "gitlab_pat",
    "ipv4",
    "jfrog_api_key",
    "jwt",
    "mailchimp_api_key",
    "npm_access_token",
    "openai_api_key",
    "pgp_private_key_block",
    "pypi_token",
    "sendgrid_api_key",
    "slack_token",
    "slack_webhook_url",
    "square_oauth_secret",
    "stripe_api_key",
    "telegram_bot_token",
    "twilio_api_key_sid",
    "uri_with_password",
    "x509_private_key"
  ],
  "source": {
    "path": "data/tools/detectors/detectsecrets.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/tools/detectors/detectsecrets.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/tools/detectors/detectsecrets.yaml"
  },
  "urls": {
    "html": "http://registry.apicrafter.io/tool/detectsecrets",
    "json": "http://registry.apicrafter.io/api/v1/tools/detectsecrets.json"
  }
}