Dodgy
A Python tool that scans codebases for potentially dangerous patterns like hardcoded passwords or accidental diff checkins.
What is Dodgy?
Dodgy is a Python-based static analysis tool that scans codebases for potentially dangerous patterns, such as hardcoded passwords, API keys, or accidental SCM diff checkins. It helps developers identify security risks and code quality issues before they are committed or deployed.
Python developers and open-source maintainers who need a simple, automated way to detect sensitive data leaks or accidental diff inclusions in their code repositories.
Developers choose Dodgy for its simplicity and focus on preventing obvious security mistakes, especially through seamless integration with pre-commit hooks to catch issues early in the development cycle.
Overview
Looks at Python code to search for things which look "dodgy" such as passwords or diffs
Use Cases
Best For
- Scanning Python projects for hardcoded credentials before public release
- Preventing accidental Git diff checkins in open-source repositories
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
