javimosch detect-secrets Plugin
detect-secrets scans codebases for secrets, API keys, tokens, and credentials. Supports baseline files for tracking known secrets and pre-commit hooks.
Commands
detect-secrets _ _ <args>— Passthrough
Usage Examples
- "scan the current directory for secrets"
- "generate a baseline of known secrets"
- "audit potential secrets from a baseline scan"
- "scan only staged files before commit"
Installation
pip install detect-secrets
Key Features
- Detects API keys, tokens, private keys, passwords, and credentials
- Baseline file support for tracking known/approved secrets
- Pre-commit hook integration
- JSON output for CI/CD pipeline integration
- Plugable plugin system for custom secret types
- Audit mode for reviewing potential secrets
- Multiple file format support