Learning so many options from this thread. I've used these tools when I knew what to look for but thats been the tricky bit. psanford also mentioned truffleHog

Learning so many options from this thread. I've used these tools when I knew what to look for but thats been the tricky bit. psanford also mentioned truffleHog and others, lstamour mentioned https://github.com/cloud-gov/caulking https://github.com/cloud-gov/caulking which is built on gitleaks which looks good. caulking's customized list of patterns for gitleaks is here https://github.com/cloud-gov/caulking/blob/master/local.toml https://github.com/cloud-gov/caulking/blob/master/local.toml Looks like it would have found the keys in my example case no problem.