ggshield
Detect and validate 500+ types of hardcoded secrets
...It scans source code, configuration files, commit history, and other artifacts to automatically detect hundreds of different secret types — such as API keys, tokens, and passwords — helping prevent accidental leaks before they reach version control or production environments. ggshield can be used interactively on a developer’s machine, integrated as a pre-commit or pre-push git hook, and run as part of automated build or merge workflows to enforce security policies consistently across teams. It works across major operating systems using Python, and offers standalone packaged binaries for environments where Python isn’t available, making it adaptable to a wide range of developer setups.