devLap

The best and fastest GitHUB secret scanner

rust dev.to

FSESC - Fast SEcret SCanner

Very blyat fast scanner of your stripe or github secrets.

Core Features

  • Performance: Built using memmap2 and rayon for high-speed scanning.
  • Accuracy: Heuristic engine with confidence scoring to minimize false positives.
  • Validation: Asynchronous API verification for detected credentials.
  • Integration: Support for GitHub Actions and Git pre-commit hooks.

Installation

npm install -g @tripock/fsesc
Enter fullscreen mode Exit fullscreen mode

Note: Requires cargo (Rust) to be installed on your system for native compilation.

Usage

Direct Scanning

fsesc scan <path>
Enter fullscreen mode Exit fullscreen mode

Advanced Options

  • --all: Scan all files, bypassing default ignored patterns (.gitignore).
  • --verify: Enable online verification for detected secrets (GitHub, Stripe).
  • install-hook: Register local git pre-commit hook.

Integration

GitHub Actions

Reference .github/workflows/fsesc.yml or use the provided action.yml.

Pre-commit Framework

Add the following to your .pre-commit-config.yaml:

- repo: local
  hooks:
    - id: fsesc
      name: fsesc
      entry: fsesc scan .
      language: system
Enter fullscreen mode Exit fullscreen mode

Security

This…

Source: dev.to

arrow_back Back to Tutorials