Detect leaked credentials in code before Git commits.
npx skills add https://github.com/DGouron/review-flow --skill security-dgouron
Please help me install this Agent Skill. Skill: security Source: https://github.com/DGouron/review-flow/tree/main/.claude/skills/security Command: npx skills add https://github.com/DGouron/review-flow --skill security-dgouron
Code scan to detect secrets before commit. Use before git add/commit/push or on demand. Checks for tokens, API keys, credentials, and other sensitive data.
Run a pre-commit secret scan before committing by using the CLI or on-demand trigger.
High-intent search queries and answers about installing and using this skill.
Pre-commit secret detection scans staged code to find and block leaked credentials before they enter version control. It checks for tokens, API keys, and sensitive data patterns by running before git add or commit operations.
Yes, you can run on-demand credential scans across GitHub and GitLab repositories. The tool integrates with Git workflows covering pushes and pull/merge requests, and supports CLI execution via the security-scan command.
Pattern-based secret detection identifies common credentials including API keys, access tokens, and other sensitive data patterns. It reports findings with actionable guidance to help remediate detected credential leaks before committing code.
Yes, the pre-commit hook integrates with existing CLI workflows through the flux security-scan command. You can trigger secret detection before git commit, git push, or run it on explicit request without disrupting your development pipeline.
Running secret detection before a git push prevents credentials from leaking into remote version control. Scanning code pre-commit blocks sensitive data locally, avoiding the need to purge leaked tokens from GitHub or GitLab history after exposure.
The best way to block leaked tokens is applying pre-commit secret detection across Git workflows. It intercepts commits, pushes, and pull/merge requests on GitHub and GitLab, using pattern matching to find credentials before integration.
piotrbDetect unencrypted secret files in staged Git changes and block commits.
prince3626ezechiel-langInspect Hermes OS keychain stores for plaintext credentials and Git history secrets.
maslennikov-igAutomate pull-request code review across six languages with structured reports.
arbazkhan971Detect exposed secrets and rotate credentials into secret managers.
