{"slug": "kingfisher", "name": "Kingfisher", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 4, "commenters": 4, "warners": 0, "score": 3.349, "rising": -1.31, "first": "2025-11-04", "latest": "2026-04-10", "why": "we use Kingfisher's validation system internally for generating request/expected_response pairs for a given secret", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 4, "neutral": 0, "compare": 0, "warn": 0}, "spark": [1, 0, 2, 0, 0, 1, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "we use Kingfisher's validation system internally for generating request/expected_response pairs for a given secret", "kind": "", "icon": true, "domain": null, "github_repo": "github.com/mongodb/kingfisher", "official_url": "https://github.com/mongodb/kingfisher", "pricing": "", "aliases": ["Kingfisher"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 763631168, "item_id": 47726948, "url": "https://news.ycombinator.com/item?id=47726948", "by": "Onavo", "date": "2026-04-10", "version": null, "stance": "recommend", "quote": "There's also https://github.com/mongodb/kingfisher", "excerpt": "There's also https://github.com/mongodb/kingfisher", "context": "", "use_case": "", "switched_from": "", "story": "A security scanner as fast as a linter \u2013 written in Rust"}, {"id": 747827744, "item_id": 46739234, "url": "https://news.ycombinator.com/item?id=46739234", "by": "lorenzleutgeb", "date": "2026-01-23", "version": null, "stance": "recommend", "quote": "I was hoping for a way to use Kingfisher as a library", "excerpt": "As Radicle is written in Rust, I was hoping for a way to use Kingfisher as a library, but did not find one. So I filed https://github.com/mongodb/kingfisher/issues/189 Of course, it'd always be possible to invoke some binary. But I am still curious about a library.", "context": "", "use_case": "", "switched_from": "", "story": "Radicle: The Sovereign Forge"}, {"id": 747823377, "item_id": 46738961, "url": "https://news.ycombinator.com/item?id=46738961", "by": "axismundi", "date": "2026-01-23", "version": null, "stance": "recommend", "quote": "and https://github.com/mongodb/kingfisher", "excerpt": "There's https://github.com/gitleaks/gitleaks and https://github.com/mongodb/kingfisher", "context": "", "use_case": "Secret scanning", "switched_from": "", "story": "Radicle: The Sovereign Forge"}, {"id": 733033440, "item_id": 45814590, "url": "https://news.ycombinator.com/item?id=45814590", "by": "dolftax", "date": "2025-11-04", "version": null, "stance": "recommend", "quote": "we use Kingfisher's validation system internally for generating request/expected_response pairs for a given secret", "excerpt": "Jai here, from Autofix Bot team. We've published results of the initial benchmark run[1] comparing Gitleaks, detect-secrets and trufflehog ~3 weeks ago. In the meantime, we've put together a significantly improved dataset, and we're planning to rerun those benchmarks shortly; will include Kingfisher to the list, and share the results here. Btw, we use Kingfisher's validation system internally for generating request/e", "context": "Autofix Bot team", "use_case": "secret validation", "switched_from": "", "story": "Show HN: Narada \u2013 Open-source secrets classification model"}]}], "caveats": [], "who": [{"by": "dolftax", "context": "Autofix Bot team", "url": "https://news.ycombinator.com/item?id=45814590", "date": "2025-11-04"}], "tags": [], "use_cases": ["secret scanning", "secret validation"], "compared": [{"slug": "gitleaks", "name": "Gitleaks", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 770088368, "item_id": 48130523, "url": "https://news.ycombinator.com/item?id=48130523", "by": "micksmix", "date": "2026-05-13", "version": null, "stance": "recommend", "quote": "I work on Kingfisher, an Apache 2.0 OSS secret scanner", "excerpt": "This is also a good reminder to scan CI logs, not just source code. Shameless plug: I work on Kingfisher, an Apache 2.0 OSS secret scanner and validator written in Rust, that can also map blast radius and revoke many creds: <https://github.com/mongodb/kingfisher> It can scan repos, history, and artifacts and validate many findings against provider APIs, as well as revoke many exposed tokens directly from the CLI. Als", "context": "", "use_case": "secret scanning", "switched_from": "", "story": "GitHub Actions issued GitHub_TOKEN disclosure in GitHub Actions logs"}], "threads": [{"url": "https://news.ycombinator.com/item?id=46732213", "title": "Radicle: The Sovereign Forge", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48120514", "title": "GitHub Actions issued GitHub_TOKEN disclosure in GitHub Actions logs", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47690405", "title": "A security scanner as fast as a linter \u2013 written in Rust", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=45569942", "title": "Show HN: Narada \u2013 Open-source secrets classification model", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {}, "2026-01": {"recommend": 2}, "2026-02": {}, "2026-03": {}, "2026-04": {"recommend": 1}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "quotes": [{"id": 763631168, "item_id": 47726948, "url": "https://news.ycombinator.com/item?id=47726948", "by": "Onavo", "date": "2026-04-10", "version": null, "stance": "recommend", "quote": "There's also https://github.com/mongodb/kingfisher", "excerpt": "There's also https://github.com/mongodb/kingfisher", "context": "", "use_case": "", "switched_from": "", "story": "A security scanner as fast as a linter \u2013 written in Rust"}, {"id": 747827744, "item_id": 46739234, "url": "https://news.ycombinator.com/item?id=46739234", "by": "lorenzleutgeb", "date": "2026-01-23", "version": null, "stance": "recommend", "quote": "I was hoping for a way to use Kingfisher as a library", "excerpt": "As Radicle is written in Rust, I was hoping for a way to use Kingfisher as a library, but did not find one. So I filed https://github.com/mongodb/kingfisher/issues/189 Of course, it'd always be possible to invoke some binary. But I am still curious about a library.", "context": "", "use_case": "", "switched_from": "", "story": "Radicle: The Sovereign Forge"}, {"id": 747823377, "item_id": 46738961, "url": "https://news.ycombinator.com/item?id=46738961", "by": "axismundi", "date": "2026-01-23", "version": null, "stance": "recommend", "quote": "and https://github.com/mongodb/kingfisher", "excerpt": "There's https://github.com/gitleaks/gitleaks and https://github.com/mongodb/kingfisher", "context": "", "use_case": "Secret scanning", "switched_from": "", "story": "Radicle: The Sovereign Forge"}, {"id": 733033440, "item_id": 45814590, "url": "https://news.ycombinator.com/item?id=45814590", "by": "dolftax", "date": "2025-11-04", "version": null, "stance": "recommend", "quote": "we use Kingfisher's validation system internally for generating request/expected_response pairs for a given secret", "excerpt": "Jai here, from Autofix Bot team. We've published results of the initial benchmark run[1] comparing Gitleaks, detect-secrets and trufflehog ~3 weeks ago. In the meantime, we've put together a significantly improved dataset, and we're planning to rerun those benchmarks shortly; will include Kingfisher to the list, and share the results here. Btw, we use Kingfisher's validation system internally for generating request/e", "context": "Autofix Bot team", "use_case": "secret validation", "switched_from": "", "story": "Show HN: Narada \u2013 Open-source secrets classification model"}]}