---
id: "detectsecrets"
category: "detector"
url: "http://registry.apicrafter.io/tool/detectsecrets"
---

# detect-secrets (`detectsecrets`)

detect-secrets is an open-source (Apache-2.0) secret scanner from Yelp, built to stop new secrets from entering a code base: it records known findings in a baseline file and is usually run as a pre-commit hook. Its plugins find secrets with service-specific regular expressions, with keywords such as password in assignments and with string entropy, and some plugins can verify a secret with the service. The plugins are in detect_secrets/plugins/ of the repository; the list of supported types covers only the registry datatypes that match a plugin.

Website: <https://github.com/Yelp/detect-secrets>

## Supported datatypes (22)

- `aws_access_key_id`
- `aws_secret_access_key`
- `azure_storage_account_key`
- `github_token`
- `gitlab_pat`
- `ipv4`
- `jfrog_api_key`
- `jwt`
- `mailchimp_api_key`
- `npm_access_token`
- `openai_api_key`
- `pgp_private_key_block`
- `pypi_token`
- `sendgrid_api_key`
- `slack_token`
- `slack_webhook_url`
- `square_oauth_secret`
- `stripe_api_key`
- `telegram_bot_token`
- `twilio_api_key_sid`
- `uri_with_password`
- `x509_private_key`