# detect-secrets

- **Canonical URI:** https://www.vioscale.ai/software/detect-secrets
- **Category:** Secrets Scanning
- **Homepage:** https://github.com/Yelp/detect-secrets
- **Also known as:** detect-secrets
- **Profile claimed by vendor:** no
- **Last updated:** 2026-08-26T19:27:44.209Z

## Vioscale score

**42.5 / 100**, confidence 28% (low). Computed 2026-09-01.

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| price_level | 100 | 0.052 | 5.2 | ✓ |
| reliability | 0 | 0.073 | 0 | - |
| capabilities | 0 | 0.084 | 0 | - |
| repo_stars | 69.1 | 0.026 | 1.8 | ✓ |
| integrations | 39.2 | 0.09355555555555557 | 3.7 | ✓ |
| dependent_projects | 40.7 | 0.063 | 2.6 | ✓ |
| dev_activity | 0 | 0.094 | 0 | ✓ |
| release_cadence | 36.1 | 0.052 | 1.9 | ✓ |
| security_posture | 0 | 0.073 | 0 | - |
| package_downloads | 0 | 0.136 | 0 | - |
| security_score | 0 | 0.042 | 0 | - |
| pricing_transparency | 55 | 0.084 | 4.6 | ✓ |
| community_qa_activity | 0 | 0.063 | 0 | - |

## Pricing

_As of 2026-08-19, [verify at source](https://github.com/pricing). Independently observed._

Open source

> Free and open source

## About

An open-source security tool that scans code repositories to identify exposed secrets such as API keys, passwords, and tokens using pattern matching and heuristic filters. Designed with enterprise needs in mind, supporting custom plugins, baseline auditing, and integration with CI/CD pipelines.

_Independently observed._

## Platform & deployment

- **Platforms:** CLI
- **Deployment:** Self-hosted

## Integrations (22)

_Independently observed._

- AWS
- Azure
- GitHub
- GitLab
- Slack
- Stripe
- Twilio
- SendGrid
- Mailchimp
- OpenAI
- Discord
- Telegram
- npm
- IBM Cloud
- IBM Cloudant
- Artifactory
- Square
- Softlayer
- PyPI
- Private Key detection
- JWT Token detection
- Basic Auth detection

## Release history

| Version | Date | Type |
|---|---|---|
| [v1.5.0](https://github.com/Yelp/detect-secrets/releases/tag/v1.5.0) | 2024-05-06 | stable |
| [v1.4.0](https://github.com/Yelp/detect-secrets/releases/tag/v1.4.0) | 2022-10-05 | stable |
| [v1.3.0](https://github.com/Yelp/detect-secrets/releases/tag/v1.3.0) | 2022-07-22 | stable |
| [v1.2.0](https://github.com/Yelp/detect-secrets/releases/tag/v1.2.0) | 2022-02-16 | stable |
| [v1.1.0](https://github.com/Yelp/detect-secrets/releases/tag/v1.1.0) | 2021-04-14 | stable |
| [v0.14.3](https://github.com/Yelp/detect-secrets/releases/tag/v0.14.3) | 2020-10-01 | stable |
| [v0.14.2](https://github.com/Yelp/detect-secrets/releases/tag/v0.14.2) | 2020-07-31 | stable |
| [v0.14.1](https://github.com/Yelp/detect-secrets/releases/tag/v0.14.1) | 2020-07-13 | stable |
| [v0.14.0](https://github.com/Yelp/detect-secrets/releases/tag/v0.14.0) | 2020-07-09 | stable |

## Security & compliance


Known vulnerabilities: 0 (0 in the last 12 months) ([source](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=detect-secrets&per_page=100)). A count reflects scale and disclosure, not quality.

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### integrations

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| integrations.count | 22 | [link](https://github.com/pricing) | 2026-08-19 | 60% (medium) |

### market

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| market.availability | `{"hqCountry":"US","primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | [link](https://github.com/pricing) | 2026-08-19 | 75% (high) |

### pricing

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| pricing.price_level | free | [link](https://github.com/pricing) | 2026-08-19 | 60% (medium) |
| pricing.transparent | yes | [link](https://github.com/pricing) | 2026-08-19 | 60% (medium) |
| pricing.model | commercial | [link](https://github.com/Yelp/detect-secrets) | 2026-08-26 | 40% (low) |

### activity

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| activity.commits_last_30d | 0 | [link](https://github.com/yelp/detect-secrets/pulse) | 2026-08-26 | 65% (medium) |

### adoption

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| adoption.github_stars | 4,629 | [link](https://github.com/yelp/detect-secrets) | 2026-08-26 | 90% (high) |
| adoption.dependent_repos | 276 | [link](https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Fyelp%2Fdetect-secrets) | 2026-08-26 | 85% (high) |

### language

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| language.primary | Python | [link](https://github.com/yelp/detect-secrets) | 2026-08-26 | 90% (high) |

### license

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| license.spdx | Apache-2.0 | [link](https://github.com/yelp/detect-secrets) | 2026-08-26 | 95% (high) |

### release

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| release.cadence_days | 115 | [link](https://github.com/yelp/detect-secrets/releases) | 2026-08-26 | 70% (medium) |

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=detect-secrets&per_page=100","last_12m":0,"max_severity":null}` | [link](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=detect-secrets&per_page=100) | 2026-08-26 | 90% (high) |

---
*Source: Vioscale (https://www.vioscale.ai/software/detect-secrets). Independent, evidence-based software intelligence. Cite the canonical URI.*