security-leak-guardrails

Configure Git repositories with secret scanning and forbidden-path checks.

131|13|Updated Dec 29, 2025

Search Tags:#git #security #secrets #guardrails #hook #ci #gitleaks

Ready to run

npx skills add https://github.com/regenrek/agent-skills --skill security-leak-guardrails

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-leak-guardrails
Source: https://github.com/regenrek/agent-skills/tree/main/skills/security-leak-guardrails
Command: npx skills add https://github.com/regenrek/agent-skills --skill security-leak-guardrails

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Sets up secret-leak prevention guardrails with forbidden path checks, gitleaks config, CI secret scanning, and dependency updates to harden repositories against credential leaks.

Core Features & Use Cases

Forbidden path checks, gitleaks config, local security script, CI secret scanning, and Dependabot maintenance across CI/CD workflows.
Works across Node and other repositories by integrating with hooks (lefthook) and standard GitOps.

Quick Start

Install the required tooling, add the guardrails files and hooks, and run the local security script to verify everything is configured correctly.

Frequently Asked Questions about security-leak-guardrails

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent secrets and credentials from leaking into Git history?▼

Prevent secret leaks by installing forbidden-path checks, a Gitleaks configuration, and CI secret scanning. These guardrails harden repositories against credential leakage across local development, pull requests, and automated checks.

What's the best way to set up CI secret scanning and forbidden-path checks in my repository?▼

CI secret scanning and forbidden-path checks are set up by adding guardrails files, integrating Git hooks with lefthook, and configuring Dependabot for dependency updates across your CI/CD workflows.

Does Gitleaks work with lefthook hooks for local secret detection?▼

Gitleaks works with lefthook hooks by integrating local security scripts into standard GitOps workflows. This enables local development secret detection before code reaches pull requests or CI pipelines.

Can I use these repository guardrails across Node and other types of repositories?▼

Repository guardrails work across Node and other repositories by integrating with hooks and standard GitOps. They apply forbidden-path checks and CI secret scanning regardless of the specific runtime environment.

How do I verify my secret leak prevention guardrails are configured correctly?▼

Verify guardrails configuration by installing required tooling, adding guardrails files and hooks, and running the included local security script to ensure all secret scanning and forbidden-path checks are active.

Why do I need Dependabot configuration for secret leak prevention?▼

Dependabot configuration maintains dependency updates alongside secret scanning guardrails to harden repositories against credential leaks. It complements Gitleaks and forbidden-path checks by keeping dependencies patched across CI/CD workflows.