Lightlines
By trailofbits

zeroize-audit

trailofbits4.3k installs

Find secrets your code leaves behind in memory.

What it does

Identifies missing or compiler-weakened wiping of sensitive data and produces an evidence-backed security report.

When to use it

Use when auditing cryptographic code, authentication systems, or other security-critical code that handles sensitive data.

How to use it

Give it a codebase to audit for secrets left in memory; it returns the final report in the conversation.

What you provide

  • An existing project

Uses

Good to know

  • starts 1 helper agents
  • starts one helper agent per item, so the count depends on the work

Latest review

What you need · 6

C/C++ audits require clang on PATH; preflight fails without it because IR and assembly analysis are unavailable.

Rust audits require cargo with the nightly toolchain for MIR and LLVM IR emission.

The Python analysis tools declare Python 3.11 or newer.

Rust audits require uv on PATH to run the Python analysis scripts.


Access · 0

No additional actions listed.