A powerful and developer-friendly secret leak detection tool designed to help teams identify exposed API keys, tokens, credentials, and sensitive data across repositories. SafePipe ensures secure software development through automated scanning and a professional dashboard.
- 🔍 Recursive Folder Scanning: Scan entire projects or specific subdirectories for secrets.
- � File Upload Support: Upload specific files directly to the dashboard for instant analysis.
- � Local Path Scanning: Enter any local or network path to scan for sensitive data.
- ⚡ High-accuracy Detection: Uses advanced regex patterns to find AWS keys, private keys, passwords, and tokens.
- 🖥️ Professional Streamlit Dashboard: User-friendly interface with real-time metrics and results.
- 📊 Exportable Reports: Download scan results in JSON format for further analysis.
- 🔒 Masked Results: Sensitive findings are masked by default to prevent shoulder surfing.
safepipe/
│
├── app.py # Main Streamlit Dashboard Application
├── safe_pipe_core.py # Core scanning logic and patterns
├── run_safe_pipe.py # CLI interface for folder scanning
├── test_secrets.txt # Demo file with mock secrets
├── requirements.txt # Python dependencies
└── reports/ # Folder for generated scan reports
git clone <your-repo-url>
cd Safe_Pipe---DevSecOps-Project-python -m venv venv
# Windows
venv\Scripts\activate
# macOS/Linux
source venv/bin/activatepip install -r requirements.txtLaunch the interactive dashboard using Streamlit:
streamlit run app.pyScan a folder directly from the command line:
python run_safe_pipe.py --folder ./my_project --output results.json- Upload Files: Drag and drop any file into the sidebar to scan it instantly.
- Local Path: Provide a full path (e.g.,
C:/Projects/MySecrets) to recursively scan all files in that directory. - Demo Mode: Enable the "Use demo test file" checkbox to see the scanner in action with sample data.
Pull requests are welcome! For major changes, please open an issue to discuss them first.
link