One of requirements I have in my work is that passwords cannot be hardcoded in source code, database dumps, scripts, etc.
However, scanning all this stuff manually and repeatedly gets tedious. Is there anything "off the shelf" that looks for password-like keywords and phrases in a file?
Sure, I can use grep with regex. But I'd prefer something that is custom-built for the task.
A very nice to have would be if it could search in a "fuzzy" manner instead of searching for fixed strings, searching for passwords, variables, database columns and content that resemble passwords or password locations.