{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"ggshield is a CLI tool that scans files, repositories, Docker images, and PyPI packages to detect more than 500+ types of secrets and potential vulnerabilities using GitGuardian's API.","skillfed_tags":["devsecops","secrets-detection","pre-commit-hook"],"use_cases":["Prevent accidental commits of API keys, database passwords, or OAuth tokens to Git repositories.","Scan Docker images before deployment to detect embedded credentials or secrets in layers.","Integrate into CI/CD pipelines to block builds or pull requests containing detected secrets.","Set up pre-commit Git hooks to catch secrets locally before they reach the repository.","Audit PyPI packages for embedded credentials or leaked secrets in dependencies."],"what_it_does":"ggshield is a command-line security scanner that integrates with GitGuardian's threat detection API to find secrets and vulnerabilities in your codebase. It runs locally or in CI/CD pipelines and can scan files, Git repositories, Docker images, and PyPI packages. The tool sends only metadata (call time, request size, scan mode) to GitGuardian\u2014your actual files and secrets remain local and are not stored on their servers. You authenticate once with a personal access token, then use simple commands like `ggshield secret scan path` to check directories or `ggshield secret scan repo` to scan a repository. It's designed to catch credential leaks before they reach version control, supporting integration as Git hooks (pre-commit, pre-push, pre-receive) and CI/CD workflows.\n\nThe package depends on 24 runtime libraries including click for CLI handling, cryptography and pyjwt for authentication, requests and oauthlib for API communication, and rich for terminal output formatting. It requires a non-EOL Python version (3.9 or later) and git. The tool is actively maintained, with recent releases and ongoing repository updates, making it suitable for teams implementing secrets detection as part of their development security workflow.","worth_installing":"Yes. ggshield is actively maintained, has low installation friction, carries a permissive MIT license, and solves a critical security problem (preventing secrets in code). It integrates cleanly into development workflows via Git hooks or CI/CD, requires no complex setup beyond authentication, and has no known vulnerabilities. Install it if your team needs automated secrets detection."},"id":"ggshield","links":{"html":"https://skillfed.io/packages/ggshield","md":"https://skillfed.io/packages/ggshield.md","pypi":"https://pypi.org/project/ggshield/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-28","license_spdx":null,"license_treatment":"permissive","name":"ggshield","python_support":"supports_current","summary":"Detect secrets from all sources using GitGuardian's brains"},"popularity":{"monthly_downloads":513108,"position":6253,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.53.0"}