Skip to main content
Prevent credential leakage by identifying hardcoded secrets before they are published to remote repositories.

​
Detected Secret Types

  • Cloud Credentials: AWS Access Keys, GCP Service Account JSONs, Azure Tenant Secrets.
  • SaaS & API Tokens: Slack Webhooks, GitHub Personal Access Tokens, Stripe API Keys, OpenAI API Keys.
  • Cryptographic Artifacts: SSH Private Keys (id_rsa), PGP keys, TLS certificates.
  • Database Connection Strings: MongoDB, PostgreSQL, MySQL URIs with embedded passwords.

​
Pre-Commit & CI Integration

Runs as a pre-commit hook or GitHub Action to block commits containing high-entropy secrets.