I wrote something* that checks the entropy of strings found in incoming webhook commit payloads. It catches a good amount of secrets, but even more false flags.

I wrote something* that checks the entropy of strings found in incoming webhook commit payloads. It catches a good amount of secrets, but even more false flags. I have to work on honing it in. I'm not sure about hosted solutions but there are some great open source tools that scan entire repos as well as their history. I have used, and like, Gitrob and Trufflehog. * https://github.com/michenriksen/gitrob https://github.com/michenriksen/gitrob * https://github.com/dxa4481/truffleHog https://github.com/dxa4481/truffleHog * * not currently OSS unfortunately