SecretSentinel

什么是 SecretSentinel？

SecretSentinel scans your code in real-time and flags hardcoded API keys, passwords and credentials before you commit them. Unlike GitHub's secret scanning which catches leaks after you push, this stops them at the source — your editor. Uses Shannon entropy scoring to catch secrets that don't match any known pattern. Also scans git history, comparesenv files, and generates security reports. Free. Works offline. Your code never leaves your machine.