Open-Source Secret Scanning Tools

Skip to main content

Hashnode Securing Bits

Command Palette

Search for a command to run...

Open-Source Secret Scanning Tools

PublishedApril 17, 2024

•1 min read•View as Markdown

Open-Source Secret Scanning Tools

Panagiotis Vasilikos

Everything I do professionally is around helping engineers create amazing applications that are both secure and reliable. That’s why I build engineering tools and educational content that simplify application security.

Throughout my career, I have performed security audits for private and open-source projects, and have found critical vulnerabilities in Google and Mozilla products. I have also taught security to hundreds of engineers and students, while I have also been an external lecturer and Ph.D. candidate in computer science at the Technical University of Denmark.

Here are some of the things I’m working on right now:

Developing a tool 🛠️ that helps software engineers build applications which comply with privacy requirements
Creating weekly educational content on application security using comic art 🦇
Creating a blog 📝 on security at securingbits.com

If you’re interested in learning more about application security, I’d love to hear from you. Feel free to send me a message, and make sure to follow me so I can make security easy for you 🙂

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

Indirect Prompt Injection

Are you building your next LLM integration? Please consider this: Integrations for data retrievals can introduce vulnerabilities in your LLM, allowing attackers to inject malicious prompts. This type of vulnerability is known as Indirect Prompt Injec...

Jun 5, 2024·1 min read·97

Indirect Prompt Injection

Terraform Security

Terraform is a go-to for infrastructure as code (IaC), letting developers easily set up and manage infrastructure. But, as with any tool, it brings security challenges. Here are five key tips to keep your Terraform setups safe and solid 👇

May 29, 2024·1 min read·38

Terraform Security

Prompt Injection Defence Tools

Guard your LLM against prompt injection with these powerful tools: - https://github.com/protectai/llm-guard - https://github.com/protectai/rebuff - https://github.com/NVIDIA/NeMo-Guardrails - https://github.com/amoffat/HeimdaLLM - https://github.com/...

May 22, 2024·1 min read·109

Prompt Injection Defence Tools

ML Model Deployment Lifecycle Threats

What could go wrong during the ML model deployment lifecycle (Part 2)? Continuing the example threat model from last time. It is based on the talk "Kubernetes MLSec: Securing AI in Space" by Francesco Beltramini and James Callaghan of ControlPlane. L...

May 15, 2024·1 min read·13

ML Model Deployment Lifecycle Threats

ML Model Development Lifecycle Threats

What could go wrong during the ML model development lifecycle? Here is an example threat model based on the talk "Kubernetes MLSec: Securing AI in Space" by Francesco Beltramini and James Callaghan of ControlPlane. Link: [https://www.youtube.com/watc...

May 8, 2024·1 min read·54

ML Model Development Lifecycle Threats

Securing Bits

56 posts

Implement secret scanning in your pipelines today with the following 5 open-source tools:

- Trufflehog https://github.com/trufflesecurity/trufflehog

- GitLeaks https://github.com/gitleaks/gitleaks

- Semgrep https://github.com/semgrep/semgrep

- Talisman https://github.com/thoughtworks/talisman

- Yelp Detect-Secrets https://github.com/Yelp/detect-secrets

#opensource #cybersecurity-1 #supplychainsecurity

45 views

© 2026 Securing Bits

Members
Archive
Privacy
Terms