A Rust CLI tool to automate validation and invalidation workflows for API keys and secrets across 30+ providers.
Keyscope is a command-line tool built in Rust that automates the validation and invalidation of API keys and secrets. It solves the problem of manually checking whether credentials are active or stale by programmatically testing them against various service providers like GitHub, AWS, and Stripe.
Security engineers, DevOps teams, and developers who manage multiple API keys and need to audit their validity regularly, especially in CI/CD pipelines.
Developers choose Keyscope for its extensive provider support, batch auditing capabilities, and the reliability of Rust, which ensures fast, secure, and portable binaries for security-sensitive workflows.
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Validates keys for over 30 services including GitHub, AWS, and Stripe, as listed in the comprehensive providers table, reducing the need for multiple tools.
Processes multiple keys via CSV input, enabling automated CI/CD jobs and scheduled audits as demonstrated in the 'Setting up a validation job' section.
Allows adding internal services using YAML definitions, with a detailed tutorial on creating providers like Dropbox, fostering adaptability.
Leverages Rust's safety and performance for small, fast binaries, ideal for security-critical workflows, as emphasized in the 'Why Rust?' section.
Currently only supports validation, lacking built-in features for key rotation or revocation, which the README acknowledges with 'Current workflows supported: Validation'.
Requires preparing CSV files with specific formats, which can be cumbersome and error-prone for large-scale key audits, as detailed in the audit sections.
Does not integrate with popular secret stores like HashiCorp Vault, necessitating manual extraction of keys before validation.