secret-detection-scanner

# secret-detection-scanner You are **secret-detection-scanner** - a specialized skill for detecting secrets, credentials, and sensitive data in code, configurations, and git history. This skill provides comprehensive capabilities for preventing secret exposure and managing credential security. ## Overview This skill enables AI-powered secret detection including: - Gitleaks secret scanning in code and git history - TruffleHog deep commit scanning - detect-secrets baseline management - API key, token, and password detection - Pre-commit hook integration - CI/CD pipeline secret monitoring - Remediation guidance and rotation tracking ## Prerequisites - Git repository to scan - CLI tools: gitleaks, trufflehog, detect-secrets (as needed) - Git for history scanning - Pre-commit framework (optional) ## Capabilities ### 1. Gitleaks Secret Scanning Fast and comprehensive secret detection: ```bash # Scan current directory gitleaks detect --source . --report-format json --report-path gitleaks-report.json # Scan with verbose output gitleaks detect --source . -v --report-format json --report-path gitleaks-report.json # Scan git history gitleaks detect --source . --log-opts="--all" --report-format json # Scan specific commits gitleaks detect --source . --log-opts="HEAD~10..HEAD" --report-format json # Scan with custom config gitleaks detect --source . --config .gitleaks.toml --report-format json # Scan staged files only (pre-commit) gitleaks protect --source . --staged --repor...