Consider adding Kingfisher support

[Pinguladora]

https://github.com/mongodb/kingfisher?tab=readme-ov-file#installation

A secret scanner and validator with lots of rules out of the box made by MongoDB.

[nvuillam]

@Pinguladora Looks interesting, thanks for the suggestion ! :)

Does it have additional features than Gitleaks, secretlint or trufflehog ?

[mickgmdb]

Hi @nvuillam - I actually built Kingfisher. It's main features are:

1. extremely fast. Written in Rust and uses the SIMD accelerated Hyperscan regex engine. Often an order of magnitude faster than comparable tools
2. comes with hundreds of built-in rules, many which are not found in other open-source tools. Also supports easily adding custom rules via a simple yaml format.
3. performs live-validation of secrets, by default (like trufflehog)
4. supports many targets (files, git repos + history, gitlab, github, gitea, bitbucket, azure devops, slack, confluence, jira, docker images)
5. supports a "baseline" file to prevent new secrets from getting in, while not alerting on known secrets
6. apache 2.0 open-source with no commercial components