Secret Scanning

Definitions

1. Automated detection of secrets (API keys, passwords, tokens, private keys) accidentally committed to source code repositories. Tools like GitHub Secret Scanning, TruffleHog, and GitLeaks scan commit history and alert on exposed credentials.

   In plain English: A tool that automatically checks your code for accidentally committed passwords and API keys.

   Example: "Secret scanning caught an AWS access key in a PR before it was merged — saved us from a potential breach."

Related Terms

• SAST
• DAST
• Supply Chain Security
• Credential Cache
• Credential Dumping
• Credential Guard
• Credential Leak
• Credential Store
• Credential Theft
• Honeytoken
• Keychain