Dev Tools · 2h ago
Sentinel: A Go-based secret scanner that ditches regex for speed
Sentinel is an open-source secret scanner built in Go that uses an Aho-Corasick automaton instead of regex to avoid catastrophic backtracking. It processes a 15MB payload in ~1.5 seconds with 100% signal-to-noise ratio. Features include pre-decoding of Base64 strings and blob aggregation for multi-line certificates.
Meridian48 take
While Sentinel's benchmarks are impressive, real-world CI/CD pipelines may reveal edge cases not covered by synthetic tests.
Read the full reporting
I built Sentinel: A blazing fast, regex-free secret scanner in Go 🛡️ →
DEV Community
secret-scannergo-tool