Automatically detect and prevent secrets from being committed to your repository.
Secret Detector is a comprehensive security tool that scans your codebase for exposed secrets, API keys, credentials, and sensitive data patterns.
It provides real-time detection with 200+ built-in patterns for common secrets, custom rule support, pre-commit hooks, entropy analysis, and allowlisting for false positives.
Install the plugin via the DCYFR CLI, configure patterns in .secretdetector.json, run scans manually or enable automatic scanning, review and fix detected secrets, and add allowlist entries for false positives.
| Package | Version | License | Vulnerabilities |
|---|---|---|---|
| fast-glob | 3.3.2 | MIT | 0 |
| micromatch | 4.0.5 | MIT | 0 |
| chalk | 5.3.0 | MIT | 0 |
| zod | 3.22.4 | MIT | 0 |