The safeguards map / 1.1 Code and dependencies

OWASP DeepSecrets

OWASP Foundation (foundation). OWASP, incubator. MIT. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

A secrets scanner that parses source code across many languages and formats, and can locate known secrets from their hashes.

Where it sits

1.1 Code and dependencies (primary): Scans source code for secrets using lexing and parsing together with pattern matching.

DeepSecrets scans code, not a stream of bytes.

captured

combining pattern matching with deep semantic code analysis

captured

Provide hashed values of known secrets, and DeepSecrets will safely locate them in plain-text without storing the secrets themselves.

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who make it
Runs
by hand

Handoffs

None recorded. A mapped entry with no handoff is here for its foundation home.

Collector's note

The page states no CI mode, so the run mode is by hand.

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.