在 AI agent 输出与流水线数据落到用户或日志之前,扫出其中暴露的 API key、token 和各类技术凭证。
16 次安装
文档
Secret Scanner
试用Detect API keys, tokens, and credentials in code with 50+ patterns, entropy analysis, and multiple report formats
它能做什么
Detect API keys, tokens, and credentials in code with 50+ patterns, entropy analysis, and multiple report formats
技能文档
Secret Scanner
Detect API keys, tokens, and credentials in code with 50+ patterns, entropy analysis, and SARIF reports.
Keywords: security, secret, scan, audit, cli, credentials, python, open-source, agent, automation, MIT
Part of the itsPremkumar Hermes / OpenClaw / Paperclip agent stack — 31 free, MIT-licensed, CI-tested agent-native tools.
What it does
Secrets leak into repos constantly and go unnoticed until exploited. Secret Scanner solves this: Detect API keys, tokens, and credentials in code with 50+ patterns, entropy analysis, and SARIF reports.
Best for: Security teams, maintainers, and CI pipelines.
Features
- Scan a path for secrets
- List detection patterns
- Emit SARIF for CI
- Filter by severity
- Skip entropy check
Install
# Requires Python 3.8+. No pip install needed.
curl -O https://raw.githubusercontent.com/itsPremkumar/secret-scanner/main/secret_scanner.py
# Or copy the file anywhere — it's self-contained.
Quick start
python secret_scanner.py self-test # prove it works end-to-end
python secret_scanner.py scan --help # scan subcommand
python secret_scanner.py check --help # check subcommand
python secret_scanner.py list-patterns --help # list-patterns subcommand
Use cases
- Scan a path for secrets
- List detection patterns
- Emit SARIF for CI
- Filter by severity
- Skip entropy check
Why choose this over alternatives
| Alternative | Why this skill is better |
|---|---|
| grep for keys | Pattern + entropy detection. |
| Single-pattern tools | 50+ patterns in one pass. |
| Manual review | SARIF drops into CI. |
FAQ (SEO / AEO)
Q: Patterns?
A: 50+ built in (keys, tokens, creds).
Q: Entropy?
A: On by default; disable with --no-entropy.
Q: SARIF?
A: Yes — --sarif for GitHub code scanning.
Q: Offline?
A: Yes.
Geo / local reach
Built and maintained by @itsPremkumar (Chennai, India · serving developers worldwide). Free for individuals and teams everywhere. Documentation in English; tool output is locale-neutral.
CI integration
# .github/workflows/verify.yml
name: Verify
on: [push]
jobs:
verify:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Self-test secret-scanner
run: python secret_scanner.py self-test
Support
Free + MIT-0 (free, modifiable, no attribution required). Sponsor if useful:
- GitHub Sponsors: https://github.com/sponsors/itsPremkumar
- Buy Me a Coffee: https://buymeacoffee.com/itsPremkumar
⭐ Star on GitHub
相关技能
Use when asked to security-audit a repository, find vulnerabilities to fix, check for leaked secrets, review dependencies for known CVEs, or harden a project...
Git Security Scanner & Repo Health Auditor — entropy-based secret detection, composite health scoring, commit quality analysis, stale branch cleanup, and dep...
Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisor...
22 次安装
Scan AI-generated code for bugs before deploying — 8 static analysis checks from critical (hardcoded secrets, unsafe eval) to low (unused imports). Productio...
4 次安装
Use when the user asks to inspect, triage, summarize, export, or safely update GitHub security alerts for code scanning, Dependabot, malware, or secret scann...
1 次安装