Scan repositories, files, and Docker images for hardcoded secrets.
npx skills add https://github.com/GitGuardian/ggshield-skill --skill ggshield-scanner
Please help me install this Agent Skill. Skill: ggshield-scanner Source: https://github.com/GitGuardian/ggshield-skill/tree/main Command: npx skills add https://github.com/GitGuardian/ggshield-skill --skill ggshield-scanner
## What problem does it solve?
Detects hardcoded secrets in code by wrapping ggshield to scan repositories, files, and Docker images, helping teams prevent secret leakage before they reach version control.
## Core Features & Use Cases
### Quick Start
Install ggshield, set GITGUARDIAN_API_KEY, and instruct your agent to run scan_repo on your project.
High-intent search queries and answers about installing and using this skill.
To scan code for hardcoded secrets before committing, you can use pre-commit checks and git hooks to inspect staged changes. This prevents sensitive data like API keys from leaking into version control by blocking insecure commits.
A repository scan can detect over 500 specific types of hardcoded secrets. It inspects whole projects, individual files, staged changes, and Docker images to identify sensitive data like API keys before they leak.
Yes, you need to set the GITGUARDIAN_API_KEY environment variable to run secret scanning on your files. This API key enforcement ensures authenticated access when the scanner inspects repositories and Docker images.
Yes, you can scan Docker images for hardcoded secrets during development workflows. The scanning functionality includes a dedicated scan_docker method to inspect container images and prevent secret leakage before deployment.
You can install git hooks for automated secret detection by instructing your AI agent to run the install_hooks method. This integrates secret scanning directly into your development workflow and pre-commit checks.
richfremScaffold Docker-enabled agent skills with runtime selection and environment validation.
NOMARJDetect hardcoded credentials and insecure default configurations in source code and config files.
piotrbDetect unencrypted secret files in staged Git changes and block commits.
anishi1222Detect hardcoded API keys, tokens, passwords, and secret keys in code repositories.
