---
title: CatchIT SECRET SCANNER Contributed to FINOS by Goldman Sachs
description: "FINOS and the CatchIT project team (as well as their newly formed OSPO) from Goldman Sachs are excited to announce that CatchIT Secret Scanner has been successfully contributed to FINOS, and can be found at this GitHub repository: https://github.com/finos/CatchIT.\n \nThe project can also be found on the FINOS Landscape here: https://landscape.finos.org/"
image: https://www.finos.org/hubfs/FINOS-catchit-contribution-gs.png
---

[![FINOS](https://www.finos.org/hs-fs/hubfs/sofin%20assets/SOFIN%20LOGOS/finos-logo.png?width=543&height=126&name=finos-logo.png "FINOS")](https://finos.org)

- [Projects](https://www.finos.org/projects) 
    - [Artificial Intelligence (AI)](https://ai.finos.org/)
    - [Common Domain Model (CDM)](https://www.finos.org/common-domain-model)
    - [FDC3](https://www.finos.org/fdc3)
    - [Fluxnova](https://fluxnova.finos.org)
    - [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project)
    - [High Performance Computing (HPC)](https://hpc.finos.org)
    - [OSERA](https://osera.finos.org/)
    - [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness)
    - [OS-Climate](https://www.finos.org/os-climate)
    - [Try our Projects](https://www.finos.org/project-sandbox)
    - [All Projects Landscape](https://landscape.finos.org/)
- [Community](https://www.finos.org/engage-with-our-community) 
    - [FINOS Community Calendar](https://www.finos.org/calendar)
    - [Community Quickstart](https://www.finos.org/get-involved)
    - [FINOS Community Site](https://community.finos.org/)
    - [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution)
    - [Unable to Contribute?](https://www.finos.org/open-source-readiness)
    - [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/)
    - [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition)
    - [Ambassador Program](https://www.finos.org/ambassador-program)
- [Membership](https://www.finos.org/membership-benefits) 
    - [Members](https://www.finos.org/members)
    - [Inquire](https://www.finos.org/membership-benefits#become-a-member)
    - [Join](https://joinnow.platform.linuxfoundation.org/?project=finos)
    - [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator)
    - [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis)
- Resources 
    - [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision)
    - [Research & Case Studies](https://www.finos.org/research-case-studies)
    - [Training](https://training.linuxfoundation.org/finos/)
    - [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction)
    - [Contributions Live Dashboard](https://metrics.finos.org)
    - [Our Github Organization](https://github.com/finos/)
    - [Our Developer Toolchain](https://odp.finos.org/)
    - [FINOS Store](https://store-finos.myshopify.com/)
- News & Events 
    - [This Week At FINOS](https://www.finos.org/this-week-at-finos)
    - [Community Blog](https://www.finos.org/blog)
    - [Newsletter](https://www.finos.org/newsletter)
    - [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast)
    - [Press Releases](https://www.finos.org/press)
    - [FINOS Events](https://www.finos.org/hosted-events)
    - [Community Events](https://www.finos.org/featured-events)
    - [Community Spotlight](https://www.finos.org/community-spotlight)
    - [Stay Informed](https://www.finos.org/sign-up)
- [About](https://www.finos.org/about-us) 
    - [Stay Informed](https://www.finos.org/sign-up)
    - [FAQs](https://www.finos.org/faq)
    - [Contact Us](https://www.finos.org/contact-us)
    - [Governing Board](https://www.finos.org/governing-board)
    - [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee)
    - [Team](https://www.finos.org/team)
    - [Governance](https://www.finos.org/governance)
    - [Code of Conduct](https://www.finos.org/code-of-conduct)
- [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum) 
    - [OSFF 2026](https://events.linuxfoundation.org/open-source-finance-forum/)
    - [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos)
    - [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos)
    - [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos)
    - [apidays Paris 2025 Videos](https://www.finos.org/apidays)

- [Projects](https://www.finos.org/projects) 
    - [Artificial Intelligence (AI)](https://ai.finos.org/)
    - [Common Domain Model (CDM)](https://www.finos.org/common-domain-model)
    - [FDC3](https://www.finos.org/fdc3)
    - [Fluxnova](https://fluxnova.finos.org)
    - [FINOS Common Cloud Controls](https://www.finos.org/common-cloud-controls-project)
    - [High Performance Computing (HPC)](https://hpc.finos.org)
    - [OSERA](https://osera.finos.org/)
    - [Open Source Readiness Initiative](https://www.finos.org/open-source-readiness)
    - [OS-Climate](https://www.finos.org/os-climate)
    - [Try our Projects](https://www.finos.org/project-sandbox)
    - [All Projects Landscape](https://landscape.finos.org/)
- [Community](https://www.finos.org/engage-with-our-community) 
    - [FINOS Community Calendar](https://www.finos.org/calendar)
    - [Community Quickstart](https://www.finos.org/get-involved)
    - [FINOS Community Site](https://community.finos.org/)
    - [Contribute](https://community.finos.org/docs/governance/Software-Projects/contribution)
    - [Unable to Contribute?](https://www.finos.org/open-source-readiness)
    - [Join our Slack channel](https://finos-lf.slack.com/messages/finos-community/)
    - [Recognize a contributor](https://github.com/finos/community/issues/new?assignees=mcleo-d&labels=community-recognition&template=Community-Recognition.md&title=FINOS+Community+Recognition)
    - [Ambassador Program](https://www.finos.org/ambassador-program)
- [Membership](https://www.finos.org/membership-benefits) 
    - [Members](https://www.finos.org/members)
    - [Inquire](https://www.finos.org/membership-benefits#become-a-member)
    - [Join](https://joinnow.platform.linuxfoundation.org/?project=finos)
    - [Member ROI Summary & Calculator](https://www.finos.org/roi-report-calculator)
    - [Dependency Consumption Analysis](https://www.finos.org/dependency-consumption-analysis)
- Resources 
    - [2025 Mission & Vision](https://www.finos.org/2024-in-review-2025-vision)
    - [Research & Case Studies](https://www.finos.org/research-case-studies)
    - [Training](https://training.linuxfoundation.org/finos/)
    - [Open Source Maturity Model](https://osr.finos.org/docs/bok/OSMM/Introduction)
    - [Contributions Live Dashboard](https://metrics.finos.org)
    - [Our Github Organization](https://github.com/finos/)
    - [Our Developer Toolchain](https://odp.finos.org/)
    - [FINOS Store](https://store-finos.myshopify.com/)
- News & Events 
    - [This Week At FINOS](https://www.finos.org/this-week-at-finos)
    - [Community Blog](https://www.finos.org/blog)
    - [Newsletter](https://www.finos.org/newsletter)
    - [Podcast: Open Source in Finance](https://www.finos.org/open-source-in-finance-podcast)
    - [Press Releases](https://www.finos.org/press)
    - [FINOS Events](https://www.finos.org/hosted-events)
    - [Community Events](https://www.finos.org/featured-events)
    - [Community Spotlight](https://www.finos.org/community-spotlight)
    - [Stay Informed](https://www.finos.org/sign-up)
- [About](https://www.finos.org/about-us) 
    - [Stay Informed](https://www.finos.org/sign-up)
    - [FAQs](https://www.finos.org/faq)
    - [Contact Us](https://www.finos.org/contact-us)
    - [Governing Board](https://www.finos.org/governing-board)
    - [Technical Oversight Committee](https://www.finos.org/technical-oversight-committee)
    - [Team](https://www.finos.org/team)
    - [Governance](https://www.finos.org/governance)
    - [Code of Conduct](https://www.finos.org/code-of-conduct)
- [OSFF + Videos](https://events.linuxfoundation.org/open-source-finance-forum) 
    - [OSFF 2026](https://events.linuxfoundation.org/open-source-finance-forum/)
    - [OSFF Toronto 2026 Videos](https://www.finos.org/osff-toronto-2026-videos)
    - [OSFF New York 2025 Videos](https://www.finos.org/osff-nyc-2025-videos)
    - [OSFF London 2026 Videos](https://www.finos.org/osff-london-2026-videos)
    - [apidays Paris 2025 Videos](https://www.finos.org/apidays)

![Community Blog](https://www.finos.org/hubfs/10.04.19.FINOS_WebsiteBanners_3.png)

# Community Blog

# CatchIT SECRET SCANNER Contributed to FINOS by Goldman Sachs

 October 13, 2021

[FINOS Team](https://www.finos.org/blog/author/finos-team)

FINOS and the CatchIT project team (as well as their newly formed OSPO) from Goldman Sachs are excited to announce that CatchIT Secret Scanner has been successfully contributed to FINOS, and can be found at this GitHub repository: [**https://github.com/finos/CatchIT**](https://github.com/finos/CatchIT).

 

The project can also be found on the FINOS Landscape here: [**https://landscape.finos.org/**](https://landscape.finos.org/)

**![FINOS-catchit-secret-scanner-contribution-gs](https://www.finos.org/hs-fs/hubfs/FINOS-catchit-secret-scanner-contribution-gs.png?width=2000&name=FINOS-catchit-secret-scanner-contribution-gs.png)**

 

**CatchIT Secret Scanner**

We are proud to announce that the Goldman Sachs developed tool called CatchIT has been released as open-source and the team is requesting your engagement to contribute to the tool to make it better. 

CatchIT-Secret scanner detects sensitive information in source-code with a strong emphasis on low execution time, CI/CD integration, high customization and minimizing false positive rates. CatchIT is a simple yet powerful framework that helps developers and organizations to mitigate the risk to credentials leakage, which further minimizes disruption to developer experience. It can be embedded as an ad-hoc job in the CI/CD pipeline, as a python zip app, or as a Docker image, and thus eliminates the need to deploy or maintain a dedicated server. It is a regex-based scanner that leverages linux commands grep and find to search for pre-defined regular expressions.

CatchIT uses entropy (of the identified findings) and confidence (of a specific regular expression) to further prioritize results and classify them into distinct categories. CatchIT scans for sensitive code, passwords, AWS account IDs, GCP keys as well as sensitive files such as KEY, PEM files among others. It provides results in JSON format.

Currently it contains the following regular expressions to identify secrets and files:

**Secrets**:

AWS-ID

PASSWORD

PASSWORD-ARGUMENT

PASSWORD-URL

GCP-API-KEY

JWT

**Files:**

RSA\_KEYS

SSH\_KEYS\_DIR

SSH\_KEYS\_DIR2

SSH\_AUTH\_KEYS

PEM

KEY

KEYTAB

CRT-CER

 

Learn more about the project at [**https://github.com/finos/CatchIT.**](https://github.com/finos/CatchIT) 

Find more information about contributing at [**https://github.com/finos/CatchIT/blob/main/CONTRIBUTING.md**](https://github.com/finos/CatchIT/blob/main/CONTRIBUTING.md).

Your feedback, issues, and contributions are very welcome (and requested)!

 

 

**Interested in this FINOS open source project, or any of our other projects? Click the link below to see how to get involved in the FINOS Community.**

[![Get Involved](https://no-cache.hubspot.com/cta/default/2419532/89037a0a-24fa-4ef5-bbf8-34d9a45ea1d3.png)](https://cta-redirect.hubspot.com/cta/redirect/2419532/89037a0a-24fa-4ef5-bbf8-34d9a45ea1d3)

 

[**This Week at FINOS Blog**](https://finos.org/this-week-at-finos?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - See what is happening at FINOS each week.

[**FINOS Landscape**](https://landscape.finos.org/?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - See our landscape of FINOS open source and open standard projects.

[**Community Calendar **](https://calendar.google.com/calendar/embed?src=finos.org_fac8mo1rfc6ehscg0d80fi8jig%40group.calendar.google.com&ctz=America%2FNew_York&utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo)- Scroll through the calendar to find a meeting to join.

[**FINOS Slack Channels**](https://finos.org/blog/finos-announces-new-community-slack?utm_campaign=20210428%20-%20FINOS%20All%20Community%20Call%20-%20Q2%202021&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - The FINOS Slack provides our Community another public channel to discuss work in FINOS and open source in finance more generally.

[**Project Status Dashboard**](https://metrics.finos.org/goto/7bfcb03f027a1406c997d731d4715ea7?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - See a live snapshot of our community contributors and activity.

[**Events**](https://finos.org/news-and-events?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - Check out our upcoming events or email [**marketing@finos.org**](mailto:marketing@finos.org) if you'd like to partner with us or have an event idea.

[**FINOS Virtual "Meetups" Videos & Slides**](https://finos.org/knowledge-base?utm_campaign=20210312%20Newsletter&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo#finos-event-videos) - See replays of our virtual "meetups" based around the FINOS Community and Projects since we can't all be in the same room right now.

[**FINOS Open Source in Finance Podcasts**](https://anchor.fm/finos?utm_campaign=20210428%20-%20FINOS%20All%20Community%20Call%20-%20Q2%202021&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-9Zgn2rjI2nlAwd4d3Mf5LKC8CmqUJ1wzZYFYOTKgWIuCxaowceMq1Y0ZiFrWPAcWoelavo) - Listen and subscribe to the first open source in fintech and banking podcasts for deeper dives on our virtual "meetup" and other topics.

 

### Share this:

- [Tweet](https://twitter.com/share)

<https://www.finos.org/blog/catchit-contributed-to-finos-by-goldman-sachs>

[← Open Source in Finance Podcast: Open Source Sustainability and Our Corporate Social Responsibility - Colin Eberhardt, Scott Logic](https://www.finos.org/blog/open-source-in-finance-podcast-open-source-sustainability-and-our-corporate-social-responsibility-colin-eberhardt-scott-logic)

[Open Source in Finance Podcast: FINOS & OSSF London Debrief 14 October 21 →](https://www.finos.org/blog/open-source-in-finance-podcast-finos-ossf-london-debrief-14-october-21)

[![FINOS Logo](https://www.finos.org/hs-fs/hubfs/sofin%20assets/SOFIN%20LOGOS/FINOS_Icon_Wordmark_White.png?width=689&height=971&name=FINOS_Icon_Wordmark_White.png "FINOS Logo")](https://www.finos.org/)

[![Twitter logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/twitter-blue-social-panel.png)](https://twitter.com/finosfoundation) [![GitHub logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/github-black-social-panel.png)](https://finos.github.io) [![LinkedIn logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/linkedin-blue-social-panel.png)](https://www.linkedin.com/company/finosfoundation) [![SlideShare logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/Homepage%20Social%20Panel/slideshare-logo.png)](https://www.slideshare.net/finosfoundation) [![YouTube logo](https://finos.org/hubfs/2419532/FINOS/website/logos/social-logos/Homepage%20Social%20Panel/youtube_logo-1.png)](https://www.youtube.com/channel/UCfJAdRALzJ7J7snubrb_Y-Q)

[Contact Us](https://www.finos.org/contact-us)  
[info@finos.org](mailto:info@finos.org)  
+1 (650) 665-9773

[Privacy | ](https://www.finos.org/privacy-policy)[Terms of Service |](https://www.finos.org/terms-of-service)[Community Code of Conduct |](https://www.finos.org/code-of-conduct)[Email Preferences](https://www.finos.org/hs/manage-preferences/unsubscribe-simple)

![](https://px.ads.linkedin.com/collect/?pid=537250&fmt=gif)