secret-scan-triage

What problem does it solve?

Manages the triage process for gitleaks findings, enabling teams to quickly separate real secret exposures from false positives and prevent unnecessary code changes or delays.

Core Features & Use Cases

• Deterministic classification of findings into confirmed secret, probable secret, or probable false positive.
• Containment and remediation guidance to revoke or rotate credentials, redact secrets, or move sensitive data to approved secret-management surfaces.
• Audit-ready documentation with a concise triage summary and action items for code hosts and security teams.
• Use Case: works with local pre-commit hooks, CI scans, or manual reviews to unblock legitimate work while preserving scan quality.

Quick Start

Run the triage workflow on a repository that produced gitleaks findings to classify each hit and record remediation steps.