SecretSweep scans a codebase (and optionally its full git history) for leaked secrets — API keys, tokens, private keys — using a combination of known-format regex patterns and Shannon entropy analysis for unknown formats. Pure Ruby standard library, zero runtime dependencies.
Required Ruby Version
>= 3.0
Authors
Majd