Secrets Scanner

OrtasecurityEn az 32K bağlam

Scans code, configuration, and git history for leaked credentials such as API keys, tokens, private keys, and connection strings. Classifies findings by severity and false-positive likelihood, and provides safe remediation steps including rotation, history scrubbing, and pre-commit prevention.

securitysecretscredentialsstatic-analysisremediation

Kullanım alanları

  • Finding hardcoded credentials in a repository
  • Triaging secret findings by severity and false-positive risk
  • Producing rotation and git-history scrubbing steps
  • Adding pre-commit hooks to prevent future leaks

Örnek prompt

Scan the following files for leaked secrets. For each finding, report the type of credential,
a severity, whether it looks like a false positive, and exact remediation steps (rotate,
scrub from history, add to ignore). Then propose a pre-commit configuration to prevent
future leaks.

```
[paste files / config here]
```

Önerilen modeller

claude-opus-4-8gpt-5-6-solgemini-3-5-pro

Uyumlu araçlar

claude-codecursorkiroany

Modaliteler

Giriş: code, text
→
Çıkış: text, code

İlgili Skills

security-auditdependency-auditorthreat-modeling

Yazar

OpenModels Community

@openmodelsrun