Quirk GitHub is an advanced search query maker (also known as a GitHub Dork Builder). It provides a checklist interface allowing developers, security teams, and auditors to compile specific search query strings containing regex key patterns and file filters to detect exposed credentials.

No. Quirk GitHub is completely client-side. The query strings are compiled locally inside your web browser. No usernames, repositories, selections, or secrets are ever sent to any external server or telemetry channel.

If you run a query on GitHub and it shows zero results, it is likely because the search defaulted to "Repositories". You must click the "Search in code" tab in GitHub's left side menu. Credentials, tokens, and files live inside the text line indexes, which require code search to trigger results.

Yes. By selecting the "global" scope tab in Step 1, the prefix username constraint (user: or org:) is omitted. The generated query will scan globally across all public code indexes on GitHub matching the selected signatures.

Gitleaks is a popular open-source local credential scanner. If you want to audit private directories or run scanning workflows on a local machine, you can export your checked patterns as a custom `gitleaks.toml` configuration to run detect scans locally.