secret-guard

To prevent secret leaks before commit, you can use a pre-commit hook to scan staged changes. This approach inspects added lines for API keys, tokens, and private keys using regex patterns, blocking the commit if secrets are detected.

Yes, you can detect API keys and tokens without external dependencies by using a pure Python script. It leverages built-in regex patterns to inspect git staged files, requiring no external libraries to identify and block credentials.

The best way to scan staged files for private keys is applying a pre-commit check that targets only added lines. This keeps the code review process fast and relevant by preventing credentials from being committed without scanning the entire repository.

Pre-commit secret detection works by inspecting git staged changes via git commands. It applies Python regex patterns to added lines to identify formatted API keys, tokens, and private keys, blocking the commit when a match is found.

No, you do not need external libraries to block API keys in a pre-commit hook. The scan runs as a zero-dependency pure Python script, using standard regex pattern matching to detect tokens and block commits.