GitGuardian Reviews

I did my first proof of concept implementation in my own dotfiles, where it can be quite easy to forget that there is (I mean was) a secret key in a particular file of your very public repository. And that's how you end up with an AWS account full of p3dn.24xlarge instances that are all crypto-mining some dumb altcoin. No, this did not happen to me, but that's always been my fear with AWS credentials.

GitGuardian provides seamless integration with existing workflows by utilizing pre-commit and GitHub Actions. Installation and adoption can be performed in minutes across multiple repos if you use shared configurations in GitHub Actions and pre-commit.

I haven't really found anything that I do not like about GitGuardian.

GitGuardian saved me and alerted at the right time, I almost lost crucial information. But guardian alerts came to my email and i was able to tackle it fast.

GitGuardian will guard you from the unfortunate errors and mistake of the human minds. Thats how i found out about it.

Can mention one right now. But i would say that some features that would be useful still on development.

I have good experience with GitGuardian, it would be great if they can share the CLI as library without any dependency.

The tool keeps me away from committing credentials in my repository. I recommend this tool to everyone.

Need a python runtime for the CLI, so it's a bit difficult to have a similar setup for all development member.

At Graasp, GitGuardian has really helped us implement a number of best practices with respect to what you commit and how you deal with the situation when things leak. Because everything we do is open source and accessible, GitGuardian is a must have!

GitGuardian gives you the peace of mind you need to ensure that whatever you are committing to your repository is safe to share with your team members and with the public in general.

Sometimes you get a false positive, which can really stress out the team unnecessarily. Nevertheless, it's better to be safe than sorry!

It has been a great experience to get notified every time I do something stupid while committing in the repo and put my privacy at risk .. GitGuardian saves me every time.

This is what I've been looking for so long.
This is the best tool for eliminating security risks from our repo indeed.

So far there's nothing about the GitGuardian that I didn't like . I find it amazing!

It was an amazing experience because it helps to improve my code quality and teach me how to work with credentials.

I like the security feature where GitGuardian can notify the developer using confidential credentials which helps to not leak the credentials and the developer can set whether credentials are testing or not, that's also what I liked. Apart from that I also liked the UI and analytics features as well integrations.

To be honest I think UI can be smoother and user-friendly.

I like how simple it is to use GitGuardian, and it's so simple that anyone can take a look at it and understand what is going on. Overall, I believe that GitGuardian has helped protect my code and catches almost everything that could have been an issue.

Something I really like about GitGuardian is how it automatically sends an email as soon as a leak has been detected and I can check it out immediately. I also like how I can add a severity level to it and add notes to the issue.

There is nothing I dislike about GitGuardian at the moment.

Usually not happy to be spammed by emails but this one was an exception, i received a clean email from GitGuardian which helps me making my repo more safe. Thanks GitGuardian team.

Very deep repo scan (even in history of commit).
No false negatives.
Provides advise to fix leaks.
Get to your repo leaks in one click from email.
Sweet user interface and experience.
No bugs encountered.

I don't see any cons for my usage of this product, it does what it promises and in a very efficient manner.

Good experience with these guys so far, with the upcoming ADO integration, GitGuardian will become our number one secret scanning tool. Detection engine and ease of integration puts you at the top of the pile.

Quick and easy integration into code repository (GitHub) and into CI/CD pipelines using GG-Shield.

UI fresh and easy to navigate.

Historic scans are great, but it would be good to tag which historic scans have pulled back scans within git history as opposed to an actual branch.

So far, I’ve had a really good experience with this service and it has really helped me in securing my public repos.

I’m instantly notified when I push a commit to GitHub and it contains any secrets that I forgot to keep out of the push.

I can’t automatically remove leaked keys and certificates from the dashboard.

Good product, need some improvements but overall it is easy to use, intuitive and very fast to identify problems.

Easy to find security breaches and fix them.
Has a clean interface.
Send direct mails when find a security breach.

Can show some links to rapid docs for fix the problems.

Overall, GitGuardian has helped my fix my security mistakes more than once, also showing me historical data about past leaks.

When dealing with secrets inside your code (like API keys), it's easy to overlook something and push a secret to your version control system. For any such case, GitGuardian immediately sends a notification alerting of the error. Not only that, but inside their dashboard you can see past leaks data, details about specific leaks and mark it as solved, not solved, or other different states.

No glaring Cons using this product. Overall a good experience.