تشغيل أي مهارة في Manus بنقرة واحدة

ابدأ الآن

secret-scanner

النجوم٥١١

التفرعات٤٢

آخر تحديث١٣ أبريل ٢٠٢٦ في ٢١:٤٣

Pre-push API key and credential scanner - blocks git push if secrets found

التثبيت

التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.

تشغيل في Manus

المصدر

vibeeval

vibeeval/vibecosystem

فتح مستودع GitHub عرض مستودعات المنشئ

تنزيل

تشغيل في Manus

المهن ذات الصلةSOC

استنادا إلى تصنيف SOC المهني

محللو أمن المعلوماتمهن الحاسوب والرياضيات·SOC 15-1212

SKILL.md

readonly

name	secret-scanner
description	Pre-push API key and credential scanner - blocks git push if secrets found
version	1.0.0
category	security
tags	["secrets","api-keys","pre-push","git-hooks","security"]

Secret Scanner

Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.

Usage

# Scan current directory
vibeco secrets

# Scan specific path
vibeco secrets /path/to/project

Detected Secrets (22 patterns)

Provider	Pattern	Example
OpenAI	`sk-proj-...`, `sk-...`	`sk-proj-abc123...`
Anthropic	`sk-ant-...`	`sk-ant-api03-...`
AWS	`AKIA...`	`AKIAIOSFODNN7EXAMPLE`
GitHub	`ghp_...`, `gho_...`, `github_pat_...`	`ghp_xxxxxxxxxxxx`
Stripe	`sk_live_...`, `pk_live_...`	`sk_live_4eC39H...`
Google	`AIza...`	`AIzaSyDaGm...`
Slack	`xoxb-...`, `xoxp-...`	`xoxb-123-456-abc`
SendGrid	`SG....`	`SG.xxx.yyy`
npm	`npm_...`	`npm_xxxxxxxxxxxxx`
PyPI	`pypi-...`	`pypi-AgEIcHl...`
Database URLs	`postgres://`, `mongodb://`, `mysql://`, `redis://`	With embedded passwords
Private Keys	`PRIVATE KEY-----`	PEM format

Auto-Setup: Git Pre-Push Hook

Add to your project's .git/hooks/pre-push:

#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1

Make it executable:

chmod +x .git/hooks/pre-push

Now every git push will scan for secrets first. If any are found, push is blocked.

How It Works

Walks all source files (skips node_modules, dist, .git, lock files)
Matches 22 regex patterns for known API key formats
Skips comments and regex definition lines (avoids false positives)
If secrets found: prints masked values, exits with code 1 (blocks push)
If clean: prints success, exits with code 0

What to Do If Secrets Are Found

Remove the secret from source code
Move to .env file (add .env to .gitignore)
Use environment variables: process.env.API_KEY
If already pushed: rotate the credential immediately (it's compromised)

Scanned File Types

.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle

المزيد من هذا المستودع

نفس المستودع

codex-orchestration

vibeeval/vibecosystem

OpenAI Codex CLI + Claude Code (Hizir) birlikte kullanim rehberi. Is dagitim pattern'leri, GitHub Actions workflow ornekleri, review dongusu ve iki AI yazilim asistaninin guclu yanlarini birlestiren orchestration stratejileri.

2026-06-10511

create-handoff

vibeeval/vibecosystem

Create handoff document for transferring work to another session

2026-06-10511

experiment-engine

vibeeval/vibecosystem

Otonom deney dongusu. Kod degisikligi yap, olc, karsilastir, kabul et veya geri al. Metrik bazli karar verme ile performans, boyut veya kalite optimizasyonu. Tek basina veya agent ile kullan.

2026-06-10511

plan-agent

vibeeval/vibecosystem

Planning agent that creates implementation plans and handoffs from conversation context

2026-06-10511

tdd-workflow

vibeeval/vibecosystem

Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.

2026-06-10511

system-overview

vibeeval/vibecosystem

Show how vibecosystem works - agents, skills, hooks, and self-learning pipeline.

2026-04-13511

name	secret-scanner
description	Pre-push API key and credential scanner - blocks git push if secrets found
version	1.0.0
category	security
tags	["secrets","api-keys","pre-push","git-hooks","security"]

Secret Scanner

Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.

Usage

# Scan current directory
vibeco secrets

# Scan specific path
vibeco secrets /path/to/project

Detected Secrets (22 patterns)

Provider	Pattern	Example
OpenAI	`sk-proj-...`, `sk-...`	`sk-proj-abc123...`
Anthropic	`sk-ant-...`	`sk-ant-api03-...`
AWS	`AKIA...`	`AKIAIOSFODNN7EXAMPLE`
GitHub	`ghp_...`, `gho_...`, `github_pat_...`	`ghp_xxxxxxxxxxxx`
Stripe	`sk_live_...`, `pk_live_...`	`sk_live_4eC39H...`
Google	`AIza...`	`AIzaSyDaGm...`
Slack	`xoxb-...`, `xoxp-...`	`xoxb-123-456-abc`
SendGrid	`SG....`	`SG.xxx.yyy`
npm	`npm_...`	`npm_xxxxxxxxxxxxx`
PyPI	`pypi-...`	`pypi-AgEIcHl...`
Database URLs	`postgres://`, `mongodb://`, `mysql://`, `redis://`	With embedded passwords
Private Keys	`PRIVATE KEY-----`	PEM format

Auto-Setup: Git Pre-Push Hook

Add to your project's .git/hooks/pre-push:

#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1

Make it executable:

chmod +x .git/hooks/pre-push

Now every git push will scan for secrets first. If any are found, push is blocked.

How It Works

Walks all source files (skips node_modules, dist, .git, lock files)
Matches 22 regex patterns for known API key formats
Skips comments and regex definition lines (avoids false positives)
If secrets found: prints masked values, exits with code 1 (blocks push)
If clean: prints success, exits with code 0

What to Do If Secrets Are Found

Remove the secret from source code
Move to .env file (add .env to .gitignore)
Use environment variables: process.env.API_KEY
If already pushed: rotate the credential immediately (it's compromised)

Scanned File Types

.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle