PledgeGuard

Rust-native secret scanner — a TruffleHog/Gitleaks alternative.

Quick Start

# Install
npm install -g pledgeguard
# or: npx pledgeguard scan .   (no install needed)
# or: brew install pledgeguard
# or: scoop install pledgeguard

# Scan your project
pledgeguard scan .

# Scan only changed files (great for PRs)
pledgeguard scan . --diff --fail-on-findings

# Generate a compliance report
pledgeguard compliance . --framework pci-dss

# Initialize config
pledgeguard init

Why PledgeGuard?

Feature	PledgeGuard	TruffleHog	Gitleaks	GitGuardian
Language	Rust	Go	Go	SaaS
Detectors	708	800+	~100	500+
Live verification	191 rule IDs	800+	❌	500+
AI integration	✅	❌	❌	Partial
MCP server	✅	❌	❌	❌
Enterprise (RBAC, audit)	✅	Partial	❌	✅
Compliance reports	✅	❌	❌	✅
Scan diffing	✅	❌	❌	✅
Webhook notifications	✅	❌	❌	✅
WASM plugins	✅	❌	❌	❌
Offline	✅	✅	✅	❌
npm/npx	✅	❌	❌	❌
GitHub Action	✅	✅	✅	✅
SARIF output	✅	✅	✅	✅
Speed	★★★★★	★★★★☆	★★★★★	★★☆☆☆

Full competitive benchmark: see BENCHMARK.md

Roadmap to #1: see ROADMAPLEAD.md

Installation

npm (recommended)

npm install -g pledgeguard
# or use without installing:
npx pledgeguard scan .

Homebrew (macOS/Linux)

brew install pledgeguard

Scoop (Windows)

scoop install pledgeguard

From source

git clone https://github.com/pledgeandgrow/pledgeguard.git
cd pledgeguard
cargo install --path crates/pledgeguard-cli

Binary download

Download from GitHub Releases for:

Linux x86_64 / ARM64
macOS x86_64 / ARM64 (Apple Silicon)
Windows x86_64

Docker

docker run ghcr.io/pledgeandgrow/pledgeguard scan /repo

Usage

Basic scan

pledgeguard scan .
pledgeguard scan src/ --min-severity high
pledgeguard scan . --format json --report-file results.json
pledgeguard scan . --format sarif --report-file results.sarif
pledgeguard scan . --format github-actions

CI/CD gate

pledgeguard scan . --fail-on-findings --min-severity high
# Exit code 1 if any findings at or above high severity

PR diff scan (fast — only changed files)

pledgeguard scan . --diff --fail-on-findings
# Only scans files changed since HEAD — perfect for pull requests

Verify secrets are active

pledgeguard scan . --verify
# Calls provider APIs to check if secrets are still valid

Git history scan

pledgeguard history .
# Scans all commits for secrets introduced in past commits

pledgeguard history . --since-commit abc123
# Incremental: scan only commits after abc123

pledgeguard history . --branch feature/x --since-date 2024-01-01
# Scoped: scan only feature/x branch since Jan 1, 2024

CI/CD integration

# CI-optimized scan with configurable exit code
pledgeguard scan . --ci-mode --format json --report-file results.json

# Fail only on critical findings, max 50 findings
pledgeguard scan . --fail-on-severity critical --max-findings 50

# Post findings as GitHub PR comment
pledgeguard scan . --pr-comment-platform github --pr-number 42 --pr-comment-repo owner/repo

# Auto-upload SARIF to GitHub Code Scanning
pledgeguard scan . --sarif-upload --format sarif

# Auto-create baseline on first run, enforce on subsequent
pledgeguard scan . --baseline-auto --enforce-baseline

# Append to existing report (multi-scan aggregation)
pledgeguard scan src/ --report-append --report-file combined.json
pledgeguard scan infra/ --report-append --report-file combined.json

Available CI/CD templates in templates/:

CircleCI — templates/circleci-orb.yml
Jenkins — templates/Jenkinsfile
DroneCI — templates/drone.yml
Azure DevOps — templates/azure-pipelines.yml
Bitbucket — templates/bitbucket-pipelines.yml
TeamCity — templates/teamcity.config
Husky — templates/husky-pre-commit
lint-staged — templates/lint-staged.json

Compliance report

pledgeguard compliance . --framework soc2
pledgeguard compliance . --framework pci-dss --verify

Scan diff

pledgeguard scan . --format json --report-file current.json
pledgeguard diff previous.json current.json
# Shows new, resolved, and unchanged findings

Webhook notification

pledgeguard notify --url https://hooks.slack.com/services/... --webhook-type slack .

Initialize config

pledgeguard init
# Creates .pledgeguard.toml with recommended defaults

Install pre-commit hook

pledgeguard install-pre-commit .

MCP server (for AI agents)

pledgeguard mcp
pledgeguard mcp --tcp 127.0.0.1:9470 --auth-token secret

AI hooks

pledgeguard install-ai-hooks --tool cursor
pledgeguard install-ai-hooks --tool claude-code
pledgeguard install-ai-hooks --tool copilot

Load custom WASM detectors

pledgeguard scan . --plugin-dir ./plugins

Baseline / allowlist

pledgeguard scan . --save-baseline .pledgeguard-baseline.json
pledgeguard scan . --baseline .pledgeguard-baseline.json

--fail-on-findings makes the CLI exit non-zero when findings are present, for use as a CI gate. history requires git on PATH and the target path to be inside a git working tree.

Built-in detectors

708 detectors covering AWS (Access Key, Secret, Session Token, MWS, Bedrock, Account ID), Azure (Storage, SAS, Client Secret, AD/Entra ID, Batch, Function, DevOps PAT, Cosmos DB), Google Cloud (API Key, OAuth, Service Account, Client ID, Gemini/PaLM), Alibaba, Tencent, DigitalOcean, IBM Cloud, Oracle Cloud, Scaleway, Vultr, Linode, Cloudflare (API Key, Token, CA Key, Global), GitHub, GitLab, Bitbucket (App Password, Client ID/Secret, DataCenter), Slack, Discord (Bot Token, Webhook, Client ID/Secret), Telegram, Microsoft Teams, Atlassian (API Token, Jira), Notion, Gitter, Webex, Intercom, HelpScout, HelpCrunch, Canny, Pipedrive, Beamer, Frame.io, Zeplin, Trello, Asana (Client ID/Secret, PAT), Stripe (Secret, Publishable, Restricted), Shopify (Access, Shared Secret, Custom/Private App), PayPal (OAuth, Client Secret), Square (Token, App Secret), Coinbase, RazorPay, Paystack, Plaid (Token, Key), Flutterwave (Secret, Encryption), Paddle, FastSpring, Sellfy, Duffel, EasyPost (API, Test), Finicity (Token, Secret), Freshbooks, GoCardless, Taxjar, Etsy, PostHog, Amplitude, Segment, Mixpanel, Heap, Pendo, Keen.io, Fathom, Plausible, Hotjar, FullStory, Bitly, Calendly, Calendarific, AppFollow, Appcues, Mailchimp, OpenAI, Anthropic (API, Admin), HuggingFace, Cohere, Replicate, Stability AI, AssemblyAI, Clarifai, OpenRouter, Together AI, Perplexity, Mistral, Groq, DeepSeek, ElevenLabs, SendGrid, Mailgun, Postmark, Mailjet (Basic, SMS), Brevo/SendinBlue, Elastic Email, Pepipost, Mailmodo, Verimail, ZeroBounce, Mailboxlayer, D7Networks, Sinch, MessageBird, Vonage/Nexmo, Plivo, Postman, PubNub, Pusher, PushBullet, Doppler, Datadog (API Key, Access Token), New Relic (License, Personal API Key), PagerDuty, Opsgenie, Sentry, SumoLogic, Splunk Observability, AppOptics, Airbrake, LogDNA, Loggly, Better Stack, Statuspage, UptimeRobot, Pingdom, Auth0 (API, Management, OAuth), Okta, OneLogin, JumpCloud, Authress, Keycloak, FusionAuth, Stytch, Clerk, WorkOS, Supabase (Service Key, Anon Key), Firebase (Token, FCM), KubeConfig, HashiCorp Vault, 1Password (Secret Key, Service Account), Vercel, Netlify, Heroku, WP Engine, Fastly, Akamai, Equinix, Fly.io, Railway, Render, Koyeb, Twitch (Client Secret, Access Token), Twitter/X, Facebook (App Secret, Access Token, OAuth), LinkedIn, Linear, Figma (Token, PAT), npm, PyPI, Docker Hub, Spotify, YouTube, Flickr, Dropbox (API Secret, Long/Short-Lived Token), Reddit (Client Secret, Access Token), Instagram, Pinterest, TikTok, Zoom, Zapier Webhook, PostgreSQL, MySQL, MongoDB, Redis, JDBC, SQL Server, Elasticsearch, InfluxDB, Couchbase, Cassandra, Neo4j, Supabase DB, PlanetScale, Neon, Turso, Convex, Age Secret Key, Kubernetes Secret Manifest, Terraform Cloud, Ansible Vault, Docker Registry, Harbor, Nexus, Confluent (Access Token, Secret Key), Databricks, Snowflake, Dynatrace, LaunchDarkly, ConfigCat, Flagsmith, Shodan, AbuseIPDB, AlienVault OTX, VirusTotal, Hunter.io, IPStack, MaxMind, CloudSight, RapidAPI, ScrapingBee, ipinfo.io, Google Maps, MapBox, MapQuest, Here Maps, OpenCage, HubSpot (API Key, OAuth), Salesforce OAuth2, Zendesk, Elastic Path, ButterCMS, Contentful (Delivery, PAT), Sanity, Storyblok, Strapi, Airtable (API Key, PAT, OAuth), Algolia Admin, Lokalise, Bitcoin (WIF), Ethereum, Solana, Infura, Alchemy, Moralis, QuickNode, Bitfinex, Bittrex (Access, Secret), Curl Authentication String, URI with Embedded Credentials, Generic OAuth Client Secret, .env File Secrets, Firebase Web Config, Twilio, Line (Messaging, Notify), Mattermost, WeChat, KakaoTalk, LiveAgent, Front, RingCentral, TeleSign, TeamViewer, CometChat, Mesibo, Bulbul, Tyntec, Kaleyra, Onbuka, ClickSend, Clockwork SMS, BombBomb, DFuse, ApiFonica, Mandrill, SparkPost, MailerLite, ConvertKit, Omnisend, Customer.io, Moosend, Dotdigital, Dyspatch, PostageApp, Nicereply, AutoPilot, Airship, Freshworks, Close CRM, Copper CRM, Streak CRM, GrooveHQ, GetGist, Autoklose, Salesflare, SalesBlink, Salescookie, Metrilo, RevampCRM, KarmaCRM, Less Annoying CRM, NetHunt CRM, Nimble CRM, Apptivo CRM, Capsule CRM, Insightly CRM, Kylas CRM, OnePageCRM, Prospect CRM, Really Simple Systems CRM, Central Station CRM, Teamgate, Axonaut, FlowFlu, Clientary, Clinchpad, CompanyHub, Campayn, Hiveage, Billomat, Alegra, Loyverse, CommerceJS, Snipcart, PartnerStack, Vouchery, Monday.com, Smartsheets, Wrike, Apollo.io, UpLead, RocketReach, Clearbit, Brandfetch, Leadfeeder, GetEmail, GetEmails, Skrappio, Powrbot, ClickUp, Todoist, Shortcut, TMetric, Clockify, Everhour, Harvest, Humanity, Toggl Track, RunRunIt, Workstack, EasyInsight, Dovico, Mavenlink, Float, Daily.co, T.ly, Rebrandly, Timezone, Jotform, Typeform, SurveySparrow, Survicate, Delighted, Feedier, Zonka Feedback, Satismeter (Project, Write), Simplesat, SurveyAnyplace, SurveyBot, Qualaroo, CustomerGuru, Abyssale, Magnetic, Refiner, Simvoly, Checkmarket, Webengage, Twelve Data, Fixer.io, Alpha Vantage, Tradier, Finnhub, Tiingo, Finage, IEX Cloud, Intrinio, Financial Modeling Prep, Nasdaq Data Link, Qubole, Enigma, Data.gov, Stockdata, Marketstack, Commodities, Baremetrics, Dwolla, WePay, Checkout.com, Paymongo, Avalara, Carbon Interface, Currency Layer, Exchange Rates, CurrencyScoop, CurrencyFreaks, Country Layer, FX Market, Currency Cloud, Kraken, Poloniex, BitMEX, CoinAPI, Coinlayer, Coinlib, CryptoCompare, Bitcoin Average, World Coin Index, Glassnode, Tatum.io, Ethplorer, NFTPort, Messari, CoinGecko, OpenWeather, WeatherStack, AccuWeather, World Weather, Tomorrow.io, AirVisual, Visual Crossing, Stormglass, Aeris Weather, Ambee, OpenUV, Edge Token, Calendly Webhook, TomTom, Geoapify, Geocodify, Geocode, Geocodio, PositionStack, LocationIQ, Graphhopper, SmartyStreets, Route4me, ZipCode, OnWater, GeoIPify, IPGeolocation, IPinfoDB, ipify, ipapi, VPN, DNS Check, Walk Score, Besttime, Hypertrack, Fulcrum, Samsara, Unsplash, Pixabay, Gyazo, Imgur, Shutterstock, IconFinder, ImageKit, Bannerbear, Imagga, Face++, SkyBiometry, Cloudmersive, ScreenshotAPI, ScreenshotLayer, Browshot, LinkPreview, Mixcloud, RAWG, Strava, FourSquare, TicketMaster, Riot Games, Cricket, All Sports, SportsMonk, Edamam, Nutritionix, Spoonacular, Calorie Ninja, Protocols.io, HypeAuditor, NewsAPI, Newscatcher, Currents, Guardian, Aylien, Cicero, Lexigram, Blogger, MediaStack, ClickHelp, Storychief, Noticeable, ReadMe, Pastebin, Crowdin, Alconost, Gengo, HappyScribe, RiteKit, RubyGems, Codacy, Coveralls, SauceLabs, Bitbar, Bugsnag, Adafruit IO, Apify, Keygen, Aiven, File.io, Flat.io, Dynalist, Sheety, Swell, M3o, JSONbin, UserStack, PureStake, Host, BaseAPI, SslMate, Adobe IO, EdenAI, Deepgram, Voicegain, Audd.io, OwlBot, DetectLanguage, LanguageLayer, ParallelDots, Veriphone, Verifier, API2Cart, APIDeck, APIFlash, Fleetbase, Agora, Yandex, Artsy, Blit.app, Censys, SecurityTrails, URLScan, Aletheia, Whoxy, Mailsac, LoginRadius, Rev, YouNeedABudget, Filestack, Bubble, Shopee, Kite Connect, Veeva Vault, Cloudways, Duda, Yext, ContentStack, Surge, Kairos, FullContact, Eversign, NetCore, Bored, HTML2PDF, PDF Layer, PDF Shift, Restpack (HTML-to-PDF, Screenshot), Documo, ClustDoc, PandaDoc, HelloSign, Juro, YouSign, VatLayer, UPC Database, ScraperAPI, ScrapingDog, ScrapeOwl, WebScraping, ZenScrape, ZenSerp, SerpStack, ScraperBox, ScrapingAnt, ScrapeStack, ProxyCrawl, Debounce, Kickbox, IPQuality, Roaring, OOPSpam, Numverify, Webflow, Squarespace, Siteleaf, GraphCMS, Kontent, Wakatime, Ubidots, Raven, Guru, Hive, Technical Analysis, Impala, Unplugg, Cloverly, Flight, AviationStack, Distribusion, Words, Holiday, Amadeus, Exchange Rate, Abstract, Auth0, Okta, Vercel, Netlify, Supabase, CircleCI, Heroku, Travis CI, DroneCI, Buildkite, TeamCity, Jenkins, GoCD, ArgoCD, Spinnaker, Harness, Codecov, SonarQube, Snyk, Artifactory, Terraform Cloud, Pivotal Tracker, Clojars, Linear, Figma, Twitch, Twitter/X, Facebook, LinkedIn, npm, PEM private keys, JWTs, PostgreSQL/MySQL/MongoDB/Redis connection strings, and generic entropy-based detection.

See SUPPORT.md for the complete list.

All matched secrets are redacted by default in CLI output (--no-redact to disable).

Features

Git history scanning

pledgeguard history <path> shells out to the system git binary and walks every commit reachable from any ref (git log --all), scanning only the lines added in each commit's diff against its parent. Findings include the commit SHA that introduced the secret.

False-positive reduction

Two layers of false-positive filtering:

Lexical heuristic (context.rs) — flags findings in same-line comments or test/fixture/example paths. Language-agnostic, applied to all files.
AST-based refinement (ast.rs) — uses the oxc parser for accurate comment span detection on JS/TS files (.js, .jsx, .ts, .tsx, .mjs, .cjs, .mts, .cts). Handles multi-line block comments and ignores // inside string literals — two cases the lexical heuristic gets wrong. Applied automatically during working-tree scans.

Findings are never dropped, only flagged; the CLI hides them by default and --show-all reveals them.

Live provider verification

--verify calls provider APIs to check whether a matched secret is still active. 48 providers are supported: GitHub, GitLab, Slack, Stripe, npm, DigitalOcean, Telegram, Twilio, OpenAI, Anthropic, PyPI, Docker Hub, SendGrid, Mailgun, Mailchimp, Opsgenie, PagerDuty, Google API, Google OAuth, HuggingFace, Shopify, Heroku, Vercel, Datadog, Cloudflare, Linear, Okta, Auth0, Supabase, CircleCI, Discord, Atlassian, New Relic, Notion, AWS STS, Azure AD, GCP IAM, Private Key (PEM), DB Connection, Slack Webhook, Vault Token, Bitbucket, SonarQube, Snyk, Twitch, Pulumi, Square, Postman, Buildkite, and Terraform Cloud. Use --only-verified to show only findings confirmed as Active. Use --verify-detectors / --no-verify-detectors for granular per-detector control. See SUPPORT.md for the full list.

Baseline / allowlist mode

--save-baseline <path> writes all current findings to a JSON baseline file. --baseline <path> suppresses findings whose fingerprint (rule_id + path + matched text) appears in the baseline. Fingerprints are line-number-agnostic so suppressions survive reformatting. The baseline file contains raw matched secret values — treat it as sensitive (add to .gitignore or store securely).

Pre-commit hook installer

pledgeguard install-pre-commit installs a git pre-commit hook that runs pledgeguard scan --fail-on-findings before each commit. Use --force to overwrite an existing hook. The hook is a shell script (requires Git Bash on Windows, which is included with Git for Windows).

SARIF output

--format sarif produces a SARIF 2.1.0 log document with deduplicated rules and per-finding results, for GitHub Code Scanning integration.

MCP server

pledgeguard mcp runs a Model Context Protocol server over stdio (JSON-RPC 2.0), exposing scan_path and scan_git_history as tools for AI agents. Supports initialize, tools/list, and tools/call.

WASM plugin system

Custom detectors can be loaded from .wasm modules at runtime with --plugin-dir <dir> (repeatable), without recompiling PledgeGuard. See crates/pledgeguard-core/src/plugin.rs for the plugin ABI documentation and examples/plugins/example-plugin/ for a minimal working plugin. Plugins run via wasmtime and are called from at most one thread at a time.

Workspace layout

pledgeguard/
├── Cargo.toml                     # workspace manifest
├── action.yml                     # GitHub Action definition
├── gitlab-ci.yml                  # GitLab CI template
├── templates/                     # publishable CI/CD templates
│   ├── circleci-orb.yml
│   ├── Jenkinsfile
│   ├── drone.yml
│   ├── azure-pipelines.yml
│   ├── bitbucket-pipelines.yml
│   ├── teamcity.config
│   ├── husky-pre-commit
│   └── lint-staged.json
├── examples/plugins/example-plugin/  # sample WASM detector plugin
└── crates/
    ├── pledgeguard-core/          # detection engine library
    │   ├── detector.rs            # Detector trait + RegexDetector
    │   ├── detectors.rs           # built-in detector definitions
    │   ├── entropy.rs             # Shannon-entropy helper
    │   ├── finding.rs             # Finding, Severity, VerificationStatus types
    │   ├── redact.rs              # secret redaction for display
    │   ├── scanner.rs             # Scanner: file walking + parallel scan + IaC detection
    │   ├── context.rs             # lexical comment/fixture-path false-positive heuristic
    │   ├── ast.rs                 # oxc-based AST false-positive refinement for JS/TS
    │   ├── git_history.rs         # git history scan + scoped history scan
    │   ├── plugin.rs              # WASM plugin loader + ABI (wasmtime)
    │   ├── verify.rs              # live provider verification
    │   ├── sarif.rs               # SARIF 2.1.0 output for GitHub Code Scanning
    │   ├── baseline.rs            # baseline/allowlist persistence and filtering
    │   ├── ci_cd.rs               # CI/CD templates, scan scope, exit code config, PR comments
    │   └── iac_detection.rs       # IaC secret detection (30+ file types)
    └── pledgeguard-cli/           # `pledgeguard` binary
        ├── main.rs                # clap CLI: scan + history + scan-source + mcp + compliance + diff
        └── mcp.rs                 # MCP server over stdio (JSON-RPC 2.0)

GitHub Action

Add .github/workflows/pledgeguard.yml to your repo:

name: PledgeGuard Secret Scan
on: [push, pull_request]
jobs:
  scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - uses: pledgeandgrow/pledgeguard@v0.1.1
        with:
          path: .
          format: github-actions
          min-severity: high
          fail-on-findings: true

See docs/github-action-example.yml for a full example with SARIF upload.

Migration

Coming from another scanner? See our migration guides:

CLI reference

pledgeguard scan <path> [OPTIONS]
pledgeguard history <path> [OPTIONS]
pledgeguard scan-source <source> [OPTIONS]
pledgeguard mcp [OPTIONS]
pledgeguard install-pre-commit [OPTIONS] [path]
pledgeguard init [OPTIONS] [path]
pledgeguard compliance <path> [OPTIONS]
pledgeguard diff <previous.json> <current.json>
pledgeguard notify [OPTIONS] <path>
pledgeguard install-ai-hooks --tool <tool>
pledgeguard ai-analyze --analysis <type> [OPTIONS] <path>

Common scan options:
  --format <table|json|sarif|csv|junit|github-actions|html|markdown|...>  Output format
  --min-severity <low|medium|high|critical>  Minimum severity to report
  --no-redact                    Show full secret values (default: redacted)
  --fail-on-findings             Exit non-zero if findings are present
  --diff                         Only scan git-changed files (PR mode)
  --plugin-dir <dir>             Load .wasm detectors (repeatable)
  --show-all                     Include likely false positives
  --verify                       Call provider APIs to check if secrets are active
  --baseline <path>              Suppress findings matching a baseline file
  --save-baseline <path>         Save current findings as a baseline file
  --config <path>                Load custom TOML rules
  --report-file <path>           Write output to file instead of stdout

CI/CD scan options:
  --since-commit <SHA>           Scan only commits after this SHA
  --since-date <date>            Scan only commits after this date
  --branch <name>                Scan only this branch
  --pr-number <N>                PR number (for PR comment integration)
  --commit-range <A..B>          Scan specific commit range
  --exit-code <N>                Custom exit code on findings (default: 1)
  --ignore-exit-code             Always exit 0 (reporting-only mode)
  --fail-on-severity <level>     Fail only on findings >= severity
  --max-findings <N>             Stop after N findings
  --ci-mode                      CI-optimized: no color, JSON, fail-on-findings
  --report-append                Append to report file (multi-scan aggregation)
  --baseline-auto                Auto-create baseline on first run
  --enforce-baseline             Fail if baseline is missing/outdated
  --pr-comment-platform <platform>  Post findings as PR/MR comment
  --pr-comment-repo <slug>       Repository slug for PR comments
  --pr-comment-token <token>     API token for PR comments
  --sarif-upload                 Auto-upload SARIF to GitHub Code Scanning
  --sarif-upload-token <token>   GitHub token for SARIF upload
  --junit-upload                 Write JUnit XML for CI test runner

Security

See SECURITY.md for responsible disclosure.

Limitations

AST refinement is JS/TS only — Python, Go, Ruby, etc. use the lexical heuristic.
Git history scans use lexical-only filtering — only added-line text is available, not the full file.
Live verification covers 48 providers — see SUPPORT.md for the full list.
Baseline files contain raw secret values — treat as sensitive.
See BENCHMARK.md for a detailed comparison.

License

MIT

Name		Name	Last commit message	Last commit date
Latest commit History 38 Commits
.cargo		.cargo
.github		.github
crates		crates
docs		docs
examples/plugins/example-plugin		examples/plugins/example-plugin
homebrew		homebrew
npm		npm
scoop		scoop
templates		templates
test		test
vscode-extension		vscode-extension
.gitignore		.gitignore
.pre-commit-hooks.yaml		.pre-commit-hooks.yaml
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
Dockerfile		Dockerfile
LICENSE		LICENSE
README.md		README.md
action.yml		action.yml
deny.toml		deny.toml
gitlab-ci.yml		gitlab-ci.yml
pledge_and_grow_logo.jpg		pledge_and_grow_logo.jpg
scan_results.json		scan_results.json

Uh oh!

Folders and files

Latest commit

History

Repository files navigation