GitHub Secrets Watcher – Detecting Accidental Secrets in Git History

说明与用途

GitHub Secrets Watcher 是一款基于 C++20 的 CLI 工具，扫描 Git 历史记录，定位可能包含秘密的文件，并提供直接指向对应提交的链接，便于快速修复。

问题

Accidental commits of environment or config files (e.g., .env, config.js) leave secrets in Git history, exposing them to anyone who clones the repo.

结果

The tool reports all detected environment/config files with commit links, allowing developers to remediate secrets efficiently without modifying repository history.

工作流

• Clone the GitHub Secrets Watcher repository
• Build the project with CMake or provided script
• Run the scan command with --username and optional --token for private repos
• Optionally adjust --depth, --max-repos, --threads, --format, and --output

证据

GitHub Secrets Watcher is a command-line tool written in modern C++20 that scans your GitHub repositories …

来源

For every hit, it gives you a direct link to the exact commit where the file appears

来源