Hacker News Reader

I wish hosted GitHub made pre-push hooks available to the public. Would make this a much easier problem with free scanning tools like Trufflehog.

Or alternatively, if GitHub Secret Scanning was available to all public repos, instead of requiring a (very) expensive GitHub Advanced Security subscription. But I understand, they need to make money somehow.

View on HN

(GitHub PM here.) The Advanced Security secret scanning experience is coming to public repos (for free, obviously)! Give us a few more months - we have a little more work to do scaling it up

Awesome, thanks for the heads-up! We will definitely look forward to it, either to replace or enhance our current in-house solution.

In the meantime, try ggshield cli https://github.com/GitGuardian/ggshield

Nah thanks, I'm already running Trufflehog for free on all of our multiple orgs' thousands of repos.

I think we would consider GG if its pricing was acceptable for non-profits though.

FYI - GitGuardian is free for individuals and teams smaller than 25

As told earlier, we have thousands of repos. And our teams are thousands of users on GH.

Reply on news.ycombinator.com