Datadog Secrets Scanning scans code to find exposed secrets. Datadog also attempts to validate secrets and surface their status (valid, invalid) to help you prioritize secrets remediation.

Set up secrets scanning

Scans can run in your CI/CD pipelines or directly in Datadog with hosted scanning (GitHub-only). To get started, go to the Code Security Setup and click Activate scanning for your repositories or learn how to set up secrets scanning using GitHub actions or with other CI providers.

Secrets scanning rules

Datadog secrets scanning is powered by Sensitive Data Scanner (SDS) and includes all of the rules in the Secrets and credentials category of SDS.