Scan code repositories for secret patterns and sensitive data exposure.
npx skills add https://github.com/xeon826/dotfiles --skill security-secrets-xeon826
Please help me install this Agent Skill. Skill: security-secrets Source: https://github.com/xeon826/dotfiles/tree/main/opencode/skill/security-secrets Command: npx skills add https://github.com/xeon826/dotfiles --skill security-secrets-xeon826
This Skill helps identify and prevent the accidental exposure of sensitive information like API keys, passwords, and tokens within your codebase, mitigating security risks.
rg, gitleaks, semgrep, and trufflehog for thorough analysis..env files and configuration scripts.Run a comprehensive scan for secrets in the current directory.
High-intent search queries and answers about installing and using this skill.
To scan a code repository for hardcoded API keys and passwords, this Skill uses automated tools like ripgrep, gitleaks, semgrep, and trufflehog to locate sensitive data. It prioritizes high-risk files like .env files and configuration scripts to find and redact credentials.
The best way to detect and redact secrets in a CI/CD pipeline is by applying automated scanning tools that identify high-signal secret patterns. This Skill integrates command-line utilities like gitleaks and trufflehog to analyze repository contents and prevent sensitive data exposure during security audits.
Yes, you need to install ripgrep, gitleaks, semgrep, and trufflehog because this Skill requires these command-line tools for automated secret detection and analysis. These dependencies enable the thorough scanning of code repositories for high-signal secret patterns and sensitive data exposure.
Yes, you can automate AWS key detection and redaction before a security audit by running a comprehensive scan on your current directory. This Skill proactively identifies and redacts credentials like API keys and tokens using comprehensive regex patterns and dedicated scanning tools.
High-signal secret detection works by applying comprehensive regex patterns alongside automated tools to prioritize scanning high-risk files like .env files and configuration scripts. This approach focuses scanning efforts on locations where API keys, tokens, and passwords are most commonly exposed.
IgorWarzochaScan code repositories for hardcoded secrets using ripgrep, gitleaks, semgrep, and trufflehog.
addxaiDetect leaked credentials in local Git history and remote repositories with TruffleHog CLI.
simplerick0Scan source code for security flaws and produce markdown findings.
salmanabdurrahmanDetect hardcoded credentials and sensitive tokens in source code and Git history.