shhgit vs automerge-action

With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

surveyjs.io

featured

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

shhgit		automerge-action
	Project
7	Mentions	1
3,788	Stars	805
-	Growth	-
0.0	Activity	6.7
8 months ago	Latest Commit	11 days ago
JavaScript	Language	JavaScript
MIT License	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

shhgit

Posts with mentions or reviews of shhgit. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-12-20.

Tencent WeChat is now a GitHub secret scanning partner
3 projects | news.ycombinator.com | 20 Dec 2022
Why do people use plain text for usernames and passwords on Github? A cautionary tale.
1 project | /r/cybersecurity | 3 Sep 2022
Searching across github
1 project | /r/hacking | 18 Jul 2022

Shhgit is a really neat tool for this
Around 50,000 GitHub credentials leaked as metadata inside commits
2 projects | /r/netsec | 13 Apr 2022
TruffleHog v3 – Detect and automatically verify over 600 credential types
3 projects | news.ycombinator.com | 4 Apr 2022

There are a lot of secret detection tools out there. It probably is going to depend a lot on the specific features you care about. I personally really like shhgit[0] which is MIT licensed and is the tool I've found to most match my workflows.
[0]: https://github.com/eth0izzle/shhgit
My MetaMask Private Keys Stolen from GitHub Private Repo in 1 Hour
1 project | news.ycombinator.com | 6 Jan 2022

Assuming that the person you were working with didn't drain your wallet, there are many tools which can be used to actively monitor for commits being done on GitHub with secrets of sort.
The first one that comes to my mind is shhgit (https://github.com/eth0izzle/shhgit)
Anyone can self host it and then add multiple GitHub Dev keys to it. Then this can be used to monitor GitHub commits being done, majority of which can be categorized as "secrets".
Ask HN: What are the best automated tools for keeping credentials out of GitHub?
4 projects | news.ycombinator.com | 9 Aug 2021

automerge-action

Posts with mentions or reviews of automerge-action. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-01-28.

Continuously generate TypeScript typings from GraphQL schema across multiple repositories 🚀
4 projects | dev.to | 28 Jan 2021

If you'd like a Pull Request to be automerged which is created in GitHub workflows, pascalgn/automerge-action is helpful. This GitHub Action merges a PR automatically when it has automerge label.

What are some alternatives?

When comparing shhgit and automerge-action you can also consider the following projects:

git-secrets - Prevents you from committing secrets and credentials into git repositories

graphql - Ruby implementation of GraphQL

trufflehog - Find and verify secrets

action-hashnode-blog - Fetch & Display Your Hashnode blog posts.

gitleaks - Protect and discover secrets using Gitleaks 🔑

cont-codegen-sandbox-client

opencti - Open Cyber Threat Intelligence Platform

GitHub-Action-Runner - Trigger / run GitHub Actions from a self-hosted web page with pure JavaScript.

detect-secrets - A developer-friendly secrets detection tool for CI and pre-commit hooks based on Yelp's detect-secrets

cont-codegen-sandbox-api

OSINT-Framework - OSINT Framework

metrics - 📊 An infographics generator with 30+ plugins and 300+ options to display stats about your GitHub account and render them as SVG, Markdown, PDF or JSON!