Scan staged git changes for sensitive patterns like AWS keys and JWTs.
npx skills add https://github.com/NIMBUS-MX/nimbus-skills --skill secrets-check
Please help me install this Agent Skill. Skill: secrets-check Source: https://github.com/NIMBUS-MX/nimbus-skills/tree/main/skills/secrets-check Command: npx skills add https://github.com/NIMBUS-MX/nimbus-skills --skill secrets-check
This Skill scans staged changes for known patterns of secrets before committing, preventing accidental exposure of sensitive information.
Run 'git commit' or say 'check for secrets' to scan for and block commits with secrets.
High-intent search queries and answers about installing and using this skill.
To prevent secret exposure in git commits, you can scan staged changes for sensitive patterns like AWS access keys and JWT tokens before finalizing the commit. This process blocks accidental disclosure of secrets by utilizing regex matching against file contents.
Regex matching detects sensitive patterns in staged git changes by evaluating file contents against known formats for credentials like Stripe API keys and JWT tokens. When a match is found, the commit is blocked and user prompts are provided to handle false positives.
Yes, you can ignore false positives when scanning staged files for API keys. The scan provides user confirmation options to unstage files, ignore the detected pattern, or rewrite the commit to ensure only actual secrets are blocked.
A pre-commit secret scan blocks API keys and tokens such as AWS access keys, Stripe live keys, and JWT tokens. It identifies these specific sensitive patterns within staged git changes to prevent accidental disclosure in code commits.
Yes, secret detection works automatically when you run a git commit or request a check for secrets. The scan evaluates your staged git changes for known secret patterns and blocks the commit if sensitive information is found.
dotnetBlock unsafe .env reads and scan staged git changes for secrets.
jackchukaAutomates multi-repo release management with gh oss-watch and semver bumping.
ragnarokhaaAutomate pre-commit code review with static security and quality scans.
CommunityToolkitEnforces security policies that block commits and reads of files containing secrets.
