Consider adding Kingfisher support

[Pinguladora]

https://github.com/mongodb/kingfisher?tab=readme-ov-file#installation

A secret scanner and validator with lots of rules out of the box made by MongoDB.

[nvuillam]

@Pinguladora Looks interesting, thanks for the suggestion ! :)

Does it have additional features than Gitleaks, secretlint or trufflehog ?

[mickgmdb]

Hi @nvuillam - I actually built Kingfisher. It's main features are:

1. extremely fast. Written in Rust and uses the SIMD accelerated Hyperscan regex engine. Often an order of magnitude faster than comparable tools
2. comes with hundreds of built-in rules, many which are not found in other open-source tools. Also supports easily adding custom rules via a simple yaml format.
3. performs live-validation of secrets, by default (like trufflehog)
4. supports many targets (files, git repos + history, gitlab, github, gitea, bitbucket, azure devops, slack, confluence, jira, docker images)
5. supports a "baseline" file to prevent new secrets from getting in, while not alerting on known secrets
6. apache 2.0 open-source with no commercial components

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity.
It will be closed in 14 days if no further activity occurs.
Thank you for your contributions.

If you think this issue should stay open, please remove the O: stale 🤖 label or comment on the issue.