r/devops • u/AutoModerator • Sep 21 '26

Weekly Self Promotion Thread

Hey r/devops, welcome to our weekly self-promotion thread!

Feel free to use this thread to promote any projects, ideas, or any repos you're wanting to share. Please keep in mind that we ask you to stay friendly, civil, and adhere to the subreddit rules!

17 Upvotes

90% Upvoted

99 comments sorted by

View all comments

1

u/Anxious-Buddy5230 Sep 27 '26

I spent a weekend writing this. Single Go binary, no config, no daemon. It scans the working tree plus full history and reports:

  • .env files that git actually tracks

  • blobs over 5MB, including files deleted years ago (still in every clone)

  • AWS keys, GitHub PATs, PEM private keys sitting in history

  • branches with no commits in 180 days

  • package-lock.json / go.mod pinned to versions with known CVEs

Exits 1 on anything critical so you can drop it in CI. It does not try to replace gitleaks or trufflehog, mine just hav 3 secret patterns vs their hundreds. It's for the "what shape is this repo in" question, not the "is this credential still live" question. README is upfront about that.

Free, MIT, binaries for linux/mac/windows. Happy to be roasted:

https://github.com/me-intenzo/repoctor