DeepTrace-AI is an advanced Python tool that scans GitHub repositories, files, and URLs for hardcoded secrets using both regex patterns and AI-based classification (CodeBERT).
- ✅ Regex + AI detection for secrets like API keys, tokens, passwords
- ⚡ Fast scanning with multithreading
- 🎯 Confidence threshold to reduce false positives
- 🔍 Scans public GitHub repos using the GitHub API
- 📂 Supports
.env, config files, and raw URLs
pip install torch transformers requests- Uses CodeBERT (microsoft/codebert-base)
- Binary classification: Sensitive vs Non-sensitive code lines
python deeptrace_ai_scanner.pyThen choose one of the options:
1️⃣ Scan Laravel default .env.example
2️⃣ Scan any GitHub repo recursively
3️⃣ Scan a raw file URL
Scanning file: .env.example ...
Error [Regex] Generic Password in .env.example, line 15: password=mysecret
Error [AI] Sensitive line in config.py, line 42: stripe_api_key = "sk_test_..."
=== Scan Summary ===
Total files scanned: 5
Files with sensitive info detected: 2
Total issues found: 6
Secure files: 3
- AWS Access Keys
- Google API Keys
- JWT Secrets
- Bearer Tokens
- Database URLs
- Stripe Keys
- Private SSH Keys
- Generic passwords & API keys
MIT License © 2025
Dharmik Dudhat
Feel free to ⭐ the repo or contribute improvements!