Skip to main content
ASM Cheatsheet
Go Deeper

Search patterns for finding credentials and configuration your organization accidentally published to public repositories.

GitHub Leak Search Examples

Useful GitHub search queries to identify potential credential or data leaks.

Example Search Queries

filename:.env DB\_PASSWORD
filename:.git-credentials
extension\:json api\_key
extension\:yaml password
org\:yourcompany password

These can be run directly in GitHub search or automated using the GitHub Search API.

Automation Tip

Use tools like GitHub Dorks or GitHub's own GraphQL and REST APIs to continuously monitor for exposed secrets tied to your organization or technology stack.