thekeys looks for exposed secrets such as AWS, Stripe, GitHub and OpenAI keys in public GitHub repositories. You can scan a whole repo or search by keyword.

Repo scans need no GitHub token. Only keyword search does.

It is strictly defensive. It never tests whether a key is valid and findings are masked. Single Python file. Feedback welcome.