Secret scanner

Paste code, config or logs. It looks for API keys, tokens, private keys and hard-coded passwords. Nothing is sent anywhere.

If a real secret was exposed, rotate it (create a new one and revoke the old one). Removing it from the code is not enough, since it stays in history. This list is not exhaustive, and a clean result isn't a guarantee.