5
thekeys, a small defensive scanner for exposed API keys in public GitHub repos (forgejo.london.li)
submitted 2 weeks ago by london443@lemmy.world to c/netsec@lemmy.world
0 comments fedilink hide all child comments

thekeys looks for exposed secrets such as AWS, Stripe, GitHub and OpenAI keys in public GitHub repositories. You can scan a whole repo or search by keyword.

Repo scans need no GitHub token. Only keyword search does.

It is strictly defensive. It never tests whether a key is valid and findings are masked. Single Python file. Feedback welcome.

no comments (yet)
sorted by: hot top new old
there doesn't seem to be anything here
this post was submitted on 08 Oct 2026
5 points (85.7% liked)

netsec

1475 readers
1 users here now

Technical news and discussion of information security.

Rules:

  1. Be excellent to each other
  2. Keep it on topic
  3. Absolutely no PII or doxing
  4. No disclosure posts

founded 3 years ago
MODERATORS
t8r@lemmy.world