ggshield
Install command:
brew install ggshieldScanner for secrets and sensitive data in code
License: MIT
Development: Pull requests
Formula JSON API: /api/formula/ggshield.json
Formula code: ggshield.rb on GitHub
Bottle (binary package) installation support provided for:
| macOS on Apple Silicon |
golden gate | ✅ |
|---|---|---|
| tahoe | ✅ | |
| sequoia | ✅ | |
| Linux | ARM64 | ✅ |
| x86_64 | ✅ |
Current versions:
| stable | ✅ | 1.56.1 |
| head | ⚡️ | HEAD |
Depends on:
| certifi | 2026.10.23 | Mozilla CA bundle for Python |
| cryptography | 50.0.2 | Cryptographic recipes and primitives for Python |
| libyaml | 0.2.5 | YAML Parser |
| openssl@4 | 4.1.0 | Cryptography and SSL/TLS Toolkit |
| pydantic | 2.14.3 | Data validation using Python type hints |
| python@3.15 | 3.15.2 | Interpreted, interactive, object-oriented programming language |
Depends on when building from source:
| pkgconf | 3.0.10 | Package compiler and linker metadata toolkit |
| rust | 1.99.1 | Safe, concurrent, practical language |
Binaries:
ggshield
Analytics:
| 30 days | 90 days | 365 days | |
|---|---|---|---|
| Installs | 896 | 1,730 | 7,453 |
Installs (--HEAD) | 5 | 7 | 21 |
| Installs on Request | 896 | 1,730 | 7,453 |
Installs on Request (--HEAD) | 5 | 7 | 21 |
| Build Errors | 0 |
Known vulnerabilities in the current version:
| GHSA-7984-qgvg-3j9c | OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating... |
| GHSA-hj66-6f7g-4r5v (medium) | Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript resp... |
| GHSA-xpv3-w29h-x7cv (medium) | Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208) |
| GHSA-3jp2-3mrg-2vxc (high) | OAuthLib: Bearer token can be retrieved as long as client knows a valid client ID for device work... |
Data from Homebrew/advisory-database. Run brew vulns ggshield for a live check.