Scan source code and Git history for secrets using trufflehog or gitleaks.
npx skills add https://github.com/woohyun212/security-skill --skill secret-scan
Please help me install this Agent Skill. Skill: secret-scan Source: https://github.com/woohyun212/security-skill/tree/main/secret-scan Command: npx skills add https://github.com/woohyun212/security-skill --skill secret-scan
Detects API keys, passwords, tokens, and private keys hidden in source code and git history, preventing credential leakage and accidental exposure.
Set SECSKILL_SCAN_PATH to the repository you want to scan and run the secret-scan skill to identify and classify secrets in code and Git history.
High-intent search queries and answers about installing and using this skill.
Scan git history for secrets by setting your repository path and running the scan, which uses tools like trufflehog or gitleaks to discover and classify exposed credentials throughout your full commit history.
Detect exposed credentials in source code before committing by integrating this secret-detection scan into pre-commit checks, identifying hidden API keys and tokens before they enter your repository.
Secret scanning works with gitleaks and trufflehog for CI pipeline integration, scanning current code and full git history to prevent credential leakage during automated builds and incident response.
You need to install trufflehog or gitleaks separately to scan code for secrets, as these external tools are required to perform the underlying source code and git history credential discovery.
Remediate leaked API keys and passwords by running a scan that classifies discovered secrets by type and provides targeted remediation guidance to resolve the credential exposure in your source code.
balsm-healthAutomate hardcoded secret detection in CI/CD pipelines with gitleaks and trufflehog.
manastalukdarScan codebases and Git history for exposed secrets using Gitleaks and TruffleHog.
kissrosecicd-hubScan Git diffs for exposed credentials using entropy analysis and regex patterns.
LeoWSY-hashblueScan source code for vulnerabilities, secrets, and dependency CVEs.
