ggscout

GitGuardian CLI tool for NHI (Non-Human Identity) discovery and remediation

ggscout is a Rust-powered command-line tool by GitGuardian that discovers and inventories Non-Human Identities (NHIs) across your production infrastructure. NHIs include services, applications, containers, and automation scripts that authenticate and access resources without human intervention. ggscout maps these identities, their permissions, and associated secrets to help organizations understand their NHI landscape and bootstrap incident remediation.

Installation

# Using uv (recommended)
uv tool install ggscout

# Using pip
pip install ggscout

Note: This is a Rust binary packaged for distribution via PyPI

Basic Usage

# Display help
ggscout --help

# Fetch secrets from configuration
ggscout fetch config.toml

# Run with debug logging
ggscout --verbose DEBUG fetch config.toml

Supported Platforms

ggscout inventories Non-Human Identities from:

  • HashiCorp Vault - KV stores, dynamic secrets, auth methods
  • AWS Secrets Manager - Secrets and associated IAM roles
  • Azure Key Vault - Keys, secrets, and managed identities
  • Google Cloud Secret Manager - Secrets and service accounts
  • Kubernetes/OpenShift - Secrets, ConfigMaps, Deployments, ServiceAccounts, Environment Variables
  • Akeyless Vault - Static and dynamic secrets
  • CyberArk SaaS / CyberArk Self-Hosted - Application identities and secrets
  • Delinea Secret Server - Machine accounts and credentials
  • GitLab CI - Project variables and pipeline identities

Key Features

  • Comprehensive NHI Discovery - Inventories services, roles, and secrets across platforms
  • Production-ready - Built for production environments with secure data handling
  • Multi-platform Support - Works with major secret management and orchestration platforms
  • Secure Transfer - Optional hashing before transmission to GitGuardian platform
  • High Performance - Rust implementation optimized for large-scale inventories
  • Flexible Configuration - TOML-based config with environment variable interpolation

Configuration Example

[sources.vault]
type = "hashicorpvault"
vault_address = "${VAULT_ADDR}"

[sources.vault.auth]
auth_mode = "token"
token = "${VAULT_TOKEN}"

[sources.k8s]
type = "k8s"
kubeconfig_path = "~/.kube/config"

Documentation

Official ggscout Documentation

About GitGuardian

GitGuardian is the code security platform for automated secrets detection and remediation across all environments from source code to production.

ggscout integrates with GitGuardian's platform to provide comprehensive visibility and control over Non-Human Identities in your production infrastructure, enabling better security posture management and incident remediation.

License

This project is licensed under a Proprietary License.

Support

Project links

Data verified by PyPI on Jun 29, 2026
Data provided by the project maintainers, verified at the time the release was uploaded to PyPI.

Key dates

PyPI data
Data sourced directly from PyPI's database.
  • Released:
Newer release available (0.31.1)

1 maintainer

PyPI data
Data sourced directly from PyPI's database.
Avatar for GitGuardian from gravatar.com GitGuardian

Credits

Author: GitGuardian

GitHub Statistics

Data verified by PyPI on Jun 29, 2026
The GitHub source repository was provided by the project maintainers and verified by PyPI at the time of upload. Stars, forks, and open issues/PRs are derived from that repository and have not been independently verified.

License

Proprietary

Requires

Python >=3.8

Tags

cli devops gitguardian secrets security

Classifiers

Report project as malware

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

ggscout-0.30.0-py3-none-musllinux_1_2_x86_64.whl (10.6 MB view details)

Uploaded Python 3musllinux: musl 1.2+ x86-64

ggscout-0.30.0-py3-none-musllinux_1_2_aarch64.whl (9.6 MB view details)

Uploaded Python 3musllinux: musl 1.2+ ARM64

ggscout-0.30.0-py3-none-manylinux_2_28_aarch64.whl (9.7 MB view details)

Uploaded Python 3manylinux: glibc 2.28+ ARM64

ggscout-0.30.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (10.4 MB view details)

Uploaded Python 3manylinux: glibc 2.17+ x86-64

ggscout-0.30.0-py3-none-macosx_11_0_arm64.whl (9.2 MB view details)

Uploaded Python 3macOS 11.0+ ARM64

ggscout-0.30.0-py3-none-macosx_10_12_x86_64.whl (10.0 MB view details)

Uploaded Python 3macOS 10.12+ x86-64

File details

Details for the file ggscout-0.30.0-py3-none-musllinux_1_2_x86_64.whl.

File metadata

File hashes

Hashes for ggscout-0.30.0-py3-none-musllinux_1_2_x86_64.whl
Algorithm Hash digest
SHA256 ce9a61ae5abfc37ebc411776201c4baecc0278ee795f42b228fcb08afb060014
MD5 f0747fb93bf98ffe756485708020da50
BLAKE2b-256 7cb3b61314ff0fa6fe8cec524f2ea468906b5632ed2f488df735e467563bb69e

See more details on using hashes here.

Provenance

The following attestation bundles were made for ggscout-0.30.0-py3-none-musllinux_1_2_x86_64.whl:

Publisher: build_release_matrix.yml on GitGuardian/ggscout

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ggscout-0.30.0-py3-none-musllinux_1_2_aarch64.whl.

File metadata

File hashes

Hashes for ggscout-0.30.0-py3-none-musllinux_1_2_aarch64.whl
Algorithm Hash digest
SHA256 8ec3d2256949201d243982e84a19344d250608edc58bfa536cbe2ddbf5b2a980
MD5 4dad5537640e90d23a2838e53c9d55d9
BLAKE2b-256 9b7c92b35c8afb38d49c085af5b122f3308398030722cd4191bb7052bdfd8f05

See more details on using hashes here.

Provenance

The following attestation bundles were made for ggscout-0.30.0-py3-none-musllinux_1_2_aarch64.whl:

Publisher: build_release_matrix.yml on GitGuardian/ggscout

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ggscout-0.30.0-py3-none-manylinux_2_28_aarch64.whl.

File metadata

File hashes

Hashes for ggscout-0.30.0-py3-none-manylinux_2_28_aarch64.whl
Algorithm Hash digest
SHA256 64fad66a794cd88133a817353d6e803e200592a0d17197fca261c91a98a96d92
MD5 8f0a89e0763dd473820fe652cd9cb517
BLAKE2b-256 c4b5551c7077a21bcd8a7e3230ebf9c740217243c9561b81463cee728140315f

See more details on using hashes here.

Provenance

The following attestation bundles were made for ggscout-0.30.0-py3-none-manylinux_2_28_aarch64.whl:

Publisher: build_release_matrix.yml on GitGuardian/ggscout

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ggscout-0.30.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl.

File metadata

File hashes

Hashes for ggscout-0.30.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl
Algorithm Hash digest
SHA256 856029b7bef4e7689cc5edd9ead22f44a0472beaa3d02147b69fb346d9d5dc6b
MD5 ec73c8110c5f8e873d5a891485c54bd8
BLAKE2b-256 629eede0b905bb5a28d88ec251283518331c256703e67702fc57a2514d5527b7

See more details on using hashes here.

Provenance

The following attestation bundles were made for ggscout-0.30.0-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl:

Publisher: build_release_matrix.yml on GitGuardian/ggscout

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ggscout-0.30.0-py3-none-macosx_11_0_arm64.whl.

File metadata

File hashes

Hashes for ggscout-0.30.0-py3-none-macosx_11_0_arm64.whl
Algorithm Hash digest
SHA256 d2176bcaa679f3af143e94332a175cbcac3e3fa97704acee01e410afb94f03e1
MD5 04b647274695bb7dfa95a79295d84110
BLAKE2b-256 fa106e42351b7bad88b380d03928bc3a24fda5171b0e744e1c70b58b7350b4dc

See more details on using hashes here.

Provenance

The following attestation bundles were made for ggscout-0.30.0-py3-none-macosx_11_0_arm64.whl:

Publisher: build_release_matrix.yml on GitGuardian/ggscout

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file ggscout-0.30.0-py3-none-macosx_10_12_x86_64.whl.

File metadata

File hashes

Hashes for ggscout-0.30.0-py3-none-macosx_10_12_x86_64.whl
Algorithm Hash digest
SHA256 d9a32dbed6d92b3ef0374dc01497a9db6b81b90e6babacdfe84c2a67da371482
MD5 b3a818ea83a45dc42ce713ffaf1c3951
BLAKE2b-256 8bdd4e2429b20da6ae58907c364ad7d743b4c4d269e5ae0381eb5814a5c5353f

See more details on using hashes here.

Provenance

The following attestation bundles were made for ggscout-0.30.0-py3-none-macosx_10_12_x86_64.whl:

Publisher: build_release_matrix.yml on GitGuardian/ggscout

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page