A security tool that scans code for secrets and passwords in JSON, JavaScript, and YAML files via CLI or GitHub PR webhooks.
Repo-supervisor is an open-source security tool that scans source code for accidentally committed secrets, passwords, and high-entropy strings. It helps developers and teams prevent sensitive data leaks by integrating into local workflows or GitHub pull requests. The tool uses context-aware parsing to analyze JSON, JavaScript, and YAML files, reducing false positives compared to generic scanners.
Development teams and DevOps engineers who need to automate security checks in their CI/CD pipelines or GitHub repositories to prevent credential exposure.
It offers dual-mode scanning (CLI and GitHub PR) with focused file support to minimize false positives, and it's deployable via AWS Lambda or Docker for flexible, self-hosted security integration.
Scan your code for security misconfiguration, search for passwords and secrets. :mag:
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Offers both CLI for local directory scanning and GitHub PR integration via webhooks, enabling flexible workflow automation as detailed in the usage sections.
Uses language-specific tokenizers for JSON, JavaScript, and YAML files to extract strings intelligently, significantly reducing false positives compared to generic scanners.
Identifies secrets by calculating string entropy with configurable thresholds, providing a robust method for catching high-entropy credentials, as explained in the security checks.
Can be deployed via AWS Lambda for PR mode or run locally in Docker, offering adaptable setup options for different environments, as noted in the pre-requisites.
Only scans JSON, JavaScript, and YAML files, missing common secret leak sources like configuration files or scripts in other languages, which restricts its utility.
The README explicitly states the project is not actively maintained, meaning no bug fixes, security updates, or new features, posing a risk for long-term use.
Setting up GitHub PR mode requires deploying to AWS Lambda and configuring webhooks, which is more cumbersome than plug-and-play alternatives.