secret-protection

What problem does it solve?

Secret Protection prevents credentials from leaking into source control, CI artifacts, logs, or AI conversation history by detecting secrets early and redacting them when they appear.

Core Features & Use Cases

• Three-layer protection: Blocks commits via pre-commit scanning, fails CI/CD diffs when secrets are present, and performs runtime detection with redaction to keep production safe.
• Zero-tolerance enforcement: Treats any detected secret as a blocker and requires remediation rather than allowing risky exceptions.
• Secret rotation policies: Limits blast radius by enforcing rotation schedules based on detected secret severity.
• Use case: Set up a new repository and its pipelines so that committing an accidentally included API key is automatically prevented and the key is rotated if it ever reaches later stages.

Quick Start

Use the secret-protection skill to configure pre-commit scanning, CI/CD secret gates, and runtime redaction for logs and agent outputs in your repository.