weinrich15 / 2ms

Too many secrets (2MS) is an open source project dedicated to helping people protect their sensitive information like passwords, API keys from appearing in public websites and communication services.

During the software development lifecycle (SDLC), developers ofen communicate and exchange secret data in various ways. While there are tools available for detecting secrets in source code and Git repositories, there are few options for identifying secrets in plain text documents, emails, chat logs, content managment systems and more. Some of them are public, or have a mixture of private / public, meaning it's easy to make an onest mistake and publish secret data to the world wide web.

2ms is built over a secret detection engine (currently gitleaks) and includes various plugins to interact with popular platforms. This means anyone can contribute, improve and extend 2ms quite easily. We believe that by working together, we can create a more secure digital world. You're welcome to join our community.

Supported Platforms

• Confluence
• Discord (coming soon)

Getting 2ms

# git clone https://github.com/Checkmarx/2ms.git
# cd 2ms
# go build
# ./2ms (linux / mac)

Getting started

Command line arguments (wip, see #20)

• --confluence The URL of the Confluence instance to scan.
• --confluence-spaces A comma-separated list of Confluence spaces to scan.
• --confluence-username confluence username or email
• --confluence-token confluence token

---

Made by Checkmarx with ❤️