Benchmarks of various tools for detecting secrets in git repositories.
- Intel Xeon E3-1270v6 - 4c/8t - 3.8 GHz/4.2 GHz
- 32 GB ECC 2400 MHz
- 2 × 450 GB SSD NVMe (SoftRaid)
| repos | noseyparker (v0.15.0) | gitleaks (v8.18.1) | trufflehog (2.2.1) (no-entropy) | trufflehog (3.63.2) |
|---|---|---|---|---|
| expired-creds | 999.50 | 2,910.10 | 6,699.80 | 884.10 |
| random-data-samples | 32,985.90 | 256,553.00 | 1,123,970.50 | 22,139.10 |
| gitleaks (repo) | 887.40 | 5,777.10 | 61,506.30 | 602.90 |
| puppeteer | 44,840.20 | 2,326,351.90 | 908,091.00 | 2,747.10 |
| deno | 3,790.10 | 24,476.70 | 323,471.10 | 12,347.80 |
| openssl | 15,231.40 | 47,039.90 | 4,227,323.60 | 4,566.60 |
| v8 | 73,255.80 | 400,464.60 | 7,318,095.30 | 11,415.90 |
| linux | 539,504.80 | 1,097,233.50 | 450,200,374.90 | 117,386.50 |
| total | 711,495.10 | 4,160,806.80 | 464,169,532.50 | 172,090.00 |
| min | 887.40 | 2,910.10 | 6,699.80 | 602.90 |
| max | 539,504.80 | 2,326,351.90 | 450,200,374.90 | 117,386.50 |
| average | 88,936.89 | 520,100.85 | 58,021,191.56 | 21,511.25 |
| repos | noseyparker (v0.15.0) | gitleaks (v8.18.1) | trufflehog (2.2.1) (no-entropy) | trufflehog (3.63.2) |
|---|---|---|---|---|
| expired-creds | 1.13 | 3.29 | 7.58 | 1.00 |
| random-data-samples | 1.49 | 11.59 | 50.77 | 1.00 |
| gitleaks (repo) | 1.47 | 9.58 | 102.02 | 1.00 |
| puppeteer | 16.32 | 846.84 | 330.56 | 1.00 |
| deno | 1.00 | 6.46 | 85.35 | 3.26 |
| openssl | 3.34 | 10.30 | 925.70 | 1.00 |
| v8 | 6.42 | 35.08 | 641.04 | 1.00 |
| linux | 4.60 | 9.35 | 3,835.20 | 1.00 |
| total | 4.13 | 24.18 | 2,697.25 | 1.00 |
| min | 1.00 | 3.29 | 7.58 | 1.00 |
| max | 16.32 | 846.84 | 3,835.20 | 3.26 |
| average | 4.47 | 116.56 | 747.28 | 1.28 |
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent