itsMe Posted August 29, 2023 Share Posted August 29, 2023 This is the hidden content, please Sign In or Sign Up DeepSecrets – a better tool for secret scanning Yet another tool – why? Existing tools don’t really “understand” code. Instead, they mostly parse texts. DeepSecrets expands classic regex-search approaches with semantic analysis, dangerous variable detection, and more efficient usage of entropy analysis. Code understanding supports 500+ languages and formats and is achieved by lexing and parsing – techniques commonly used in SAST tools. DeepSecrets also introduces a new way to find secrets: just use hashed values of your known secrets and get them found plain in your code. Under the hood There are several core concepts: File Tokenizer Token Engine Finding ScanMode This is the hidden content, please Sign In or Sign Up Link to comment Share on other sites More sharing options...
Recommended Posts