Aan de slag

Env Secret Audit — Catch Leaked Secrets

by: Jason J_4tLspJ

Stop API keys and private keys from reaching git, screenshots, or shared logs.

#Techniek

Beoordeling

Meer beoordelingen nodig

Verkocht

Gebruikswijze

Downloaden

env-secret-audit v1.1.0

A secret-leak scanner for .env files and agent config files.

What it does

Scans .env files and agent config files for leaked secrets
Scans git history for secrets that were committed earlier
Produces SARIF output for CI gates
Provides a pre-commit hook to catch leaks before they are committed

Why use it

Stop API keys and private keys from reaching git, screenshots, or shared logs.

Secret Leak Scanner — catch & rotate leaked keys

Built around the part everyone gets wrong: when a key leaks you rotate it first — it's compromised the second it hits a remote, and bots scan public pushes within seconds. Scans staged changes, the working tree, and git history for provider key shapes, private keys, committed .env/credential files, and hardcoded creds — tuned for signal over noise so placeholders and $ENV refs don't cry wolf — then walks rotate → purge-from-history → move-to-env → add-a-pre-commit-hook, in the right order.

US$4.99

LeakageIQ — Supplier Overpayment Intelligence

Find hidden supplier overpayments before they become permanent. LeakageIQ analyzes invoices, POs, contracts and billing evidence to identify price variances, duplicate charges, unauthorized fees, quantity discrepancies and potential recovery opportunities.

US$9.99 / wk

SkillSmith Repo Security Audit

Defensive application-security auditing: turns a repo, manifest, or code snippet into an actionable report—dependency vulnerabilities, leaked secrets, insecure code patterns, and config hardening—mapped to OWASP Top 10 and ranked by severity. Finds risk and the fix only, never attack content.

US$49