macOS
Homebrew已验证 · 100%
brew install two-mslocal Homebrew formula metadata
安装
其他安装命令
概览
软件包摘要
Detect secrets in files and communication platforms
历史
项目历史与用法
2ms, short for Too Many Secrets, is a Checkmarx open-source CLI for finding exposed credentials in code, files, Git history, and collaboration platforms.
项目历史
The README describes 2ms as a modern secrets-discovery CLI from Checkmarx that builds on the gitleaks detection engine with Checkmarx rules, CVSS-based scoring, reporting, and optional live validation. Its public release history visible through GitHub starts in the 2023 series and continues through frequent 2026 releases.
采用历史
The tool is packaged for Homebrew and also distributed through GitHub releases, source builds, and Docker. Its adoption story is therefore CI and AppSec oriented: developers install it locally with Homebrew, run it in containers, or wire SARIF/JSON output into pipelines.
使用方式
2ms is used to scan local filesystems, Git repositories, Confluence Cloud, Slack, Discord, and Paligo. The README examples emphasize `2ms filesystem --path .` for workspace scans and `2ms git . --depth 50` for recent Git history.
为什么软件包爱好者会关心
For package-manager users, 2ms is interesting because it compresses several security-scanning surfaces into one small Go CLI. It is the sort of tool installed ad hoc before publishing code, added to CI as a gate, or used during incident response to search histories and chat exports for credentials.
时间线
- 2023: GitHub release metadata shows early public 2.x releases.
- 2026: GitHub release metadata shows active 5.x releases and prereleases.
Related projects
- gitleaks: the detection engine named by the 2ms README.
- Checkmarx: maintainer and vendor of the 2ms project.
来源
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 6 个平台目标。
- 构建元数据列出 1 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
2ms | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-04
管理器版本5.2.4
管理器更新时间2026-07-26
本地数据OK
上游当前
检测到的最新版本v5.2.4
https://github.com/Checkmarx/2ms
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:two-ms |
|---|---|
| 版本 | 5.2.4 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/two-ms |
| 主页 | https://github.com/Checkmarx/2ms |
| 仓库 | https://github.com/Checkmarx/2ms |
| 许可证 | Apache-2.0 |
| 源码归档 | https://github.com/Checkmarx/2ms/archive/refs/tags/v5.2.4.tar.gz |
| 最后更新 | 2026-07-26T03:12:24+02:00 |
| Pulse | updated |
| 构建依赖 | go |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | two-ms |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation