Назад към всички

secret-scanner

// Scan your codebase for leaked secrets, API keys, and credentials before they hit production.

$ git log --oneline --stat
stars:370
forks:70
updated:February 19, 2026
SKILL.mdreadonly
SKILL.md Frontmatter
namesecret-scanner

Secret Scanner

Scan your codebase for leaked secrets, API keys, and credentials before they hit production.

Quick Start

npx ai-secret-scan

What It Does

  • Scans files for hardcoded secrets and API keys
  • Detects common patterns (AWS, Stripe, GitHub tokens, etc.)
  • Checks .env files for sensitive data exposure
  • Warns about secrets in git history
  • Zero config, instant results

Usage

# Scan current directory
npx ai-secret-scan

# Scan specific path
npx ai-secret-scan ./src

When to Use

  • Before pushing to a public repo
  • During security audits
  • Setting up CI/CD pipelines
  • Onboarding new team members

Part of the LXGIC Dev Toolkit

One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups.

Find more:

License

MIT. Free forever.