Scan code repositories for hardcoded secrets using gitleaks, truffleHog, and git-secrets.
npx skills add https://github.com/Mekann2904/mekann --skill secret-detector
Please help me install this Agent Skill. Skill: secret-detector Source: https://github.com/Mekann2904/mekann/tree/main/.pi/lib/skills/secret-detector Command: npx skills add https://github.com/Mekann2904/mekann --skill secret-detector
This Skill prevents sensitive information like API keys, passwords, and tokens from being accidentally exposed in code repositories, safeguarding against data breaches and unauthorized access.
git-secrets, truffleHog, and gitleaks to scan code for known secret patterns.Run the secret-detector skill to scan the current directory for any exposed secrets.
High-intent search queries and answers about installing and using this skill.
To scan code for hardcoded API keys and passwords before committing, run an automated secret scanning tool over the current directory. This process integrates tools like gitleaks and truffleHog to identify exposed credentials.
Automated secret scanning is the process of inspecting code repositories for sensitive data like API keys and JWTs. It detects exposed tokens by utilizing regular expressions to identify common credential formats and known secret patterns.
Yes, secret scanning works with git-secrets, truffleHog, and gitleaks. It integrates these tools to perform pattern matching and identify common formats of database credentials, private keys, and API keys in your development workflow.
Yes, you can use code scanning to check for database credentials in a local directory. Running the scan automatically inspects the current directory's files for hardcoded secrets, addressing security risks associated with accidental credential exposure.
You need to scan repositories for secrets to satisfy requirements for proactive security auditing and compliance with data protection policies. Detecting hardcoded credentials prevents data breaches and unauthorized access to sensitive systems.
Pattern matching can identify common formats of API keys, database credentials, private keys, and JWTs in code. It uses regular expressions to find these specific secret patterns and prevent sensitive information from being exposed.
RheasilviaGenerate markdown wikis and Mermaid diagrams from software repositories.
drvossDetect hardcoded API keys, tokens, and passwords in source code and git history.
Serg28Automate security audits with semgrep, trivy, gitleaks, and dependency scanners.
fiftynotaiDeploy code and brain data to a remote VPS via git push and MCP calls.