Hey Product Hunt 👋 I built FindKey to make defensive secret scanning less tedious when you manage lots of GitHub repositories. Instead of manually collecting repos and running multiple tools one by one, you paste a GitHub org/user URL and FindKey fetches the repositories, clones them into a temporary workspace, runs Gitleaks + TruffleHog, and shows both normalized findings and raw reports in one native macOS app. It also supports an optional GitHub token for private repos and rate limits, and the token is not stored on disk. You can install it with Homebrew Cask, and it also pulls in Gitleaks and TruffleHog as dependencies. I’d love feedback on the UX, reporting flow, and what would make this more useful for security reviews.

findkey

opensource

opensource