Skip to content

API-based platform for hunting exposed secrets across GitHub repositories

License

Notifications You must be signed in to change notification settings

boringtools/git-alerts-api

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

GitAlerts

A comprehensive platform for automated security scanning of GitHub repositories to detect exposed secrets and sensitive information. This project extends the original git-alerts CLI tool with a web-based platform.

Overview

GitAlerts provides a complete solution for monitoring GitHub repositories for security vulnerabilities:

  • Automated Scanning - Detect exposed secrets using TruffleHog
  • Multiple Discovery Methods - Scan organization repos, user repos, and GitHub search results
  • Smart Filtering - Reduce false positives with configurable ignore rules
  • Web Interface - Manage scans and view results through a modern React UI
  • API Access - RESTful API with interactive documentation
  • AI Integration - MCP server for LLM/AI tool integration

Project Structure

This project consists of three main components:

Quick Start

  1. Clone the repository:
git clone https://github.com/YOUR_USERNAME/git-alerts-api.git
cd git-alerts-api
  1. Set up the API:
cd api
# See api/README.md for detailed setup instructions
  1. Set up the UI (optional):
cd ui
# See ui/README.md for detailed setup instructions
  1. Set up the MCP Server (optional):
cd mcp-server
# See mcp-server/README.md for detailed setup instructions

Documentation

About

API-based platform for hunting exposed secrets across GitHub repositories

Topics

Resources

License

Stars

Watchers

Forks