FindKey is a native macOS app for defensive secret scanning across GitHub orgs and users. Paste a GitHub org/user URL, fetch repositories, scan them with Gitleaks + TruffleHog, and review findings plus raw reports in one place.

AppSignal — Full-stack monitoring for errors, metrics, and logs

Full-stack monitoring for errors, metrics, and logs

Hey Product Hunt 👋 I built FindKey to make defensive secret scanning less tedious when you manage lots of GitHub repositories. Instead of manually collecting repos and running multiple tools one by one, you paste a GitHub org/user URL and FindKey fetches the repositories, clones them into a temporary workspace, runs Gitleaks + TruffleHog, and shows both normalized findings and raw reports in one native macOS app. It also supports an optional GitHub token for private repos and rate limits, and the token is not stored on disk. You can install it with Homebrew Cask, and it also pulls in Gitleaks and TruffleHog as dependencies. I’d love feedback on the UX, reporting flow, and what would make this more useful for security reviews.

AppSignal — Full-stack monitoring for errors, metrics, and logs

Full-stack monitoring for errors, metrics, and logs

findkey

opensource

opensource