Expand description
Pure-Rust core for secretsniff. Source-code secret scanner.
Two layers:
- Regex detectors for known formats (AWS keys, GitHub PATs, etc.). These are fast, low-false-positive when patterns match exactly.
- High-entropy filter that flags any base64/hex-ish substring of
length ≥
min_entropy_lengthwhose Shannon entropy meets a threshold. Catches one-off secrets that don’t fit a known format.
Structs§
- Finding
- One finding.
- Scanner
- Compiled scanner.
- Scanner
Config - Scanner configuration.
Enums§
- Scanner
Error - All errors surfaced by
secretsniff-core.
Type Aliases§
- Result
- Crate-wide result alias.