p.enthalabs

GitHub - NenadZivotic/secret-leak-scan-lite

Skip to content

Navigation Menu

[](https://github.com/)

Sign in

Appearance settings

* Platform

* AI CODE CREATION

- GitHub Copilot Write better code with AI

- GitHub Copilot app Direct agents from issue to merge

- MCP Registry Integrate external tools

* DEVELOPER WORKFLOWS

- Actions Automate any workflow

- Codespaces Instant dev environments

- Issues Plan and track work

- Code Review Manage code changes

- Code Quality Enforce quality at merge

* APPLICATION SECURITY

- GitHub Advanced Security Find and fix vulnerabilities

- Code security Secure your code as you build

- Secret protection Stop leaks before they start

* EXPLORE

- Why GitHub

- Documentation

- Blog

- Changelog

- Marketplace

View all features

* Solutions

* BY COMPANY SIZE

- Enterprises

- Small and medium teams

- Startups

- Nonprofits

* BY USE CASE

- App Modernization

- DevSecOps

- DevOps

- CI/CD

- View all use cases

* BY INDUSTRY

- Healthcare

- Financial services

- Manufacturing

- Government

- See all industries

View all solutions

* Resources

* EXPLORE BY TOPIC

- AI

- Software Development

- DevOps

- Security

- View all topics

* EXPLORE BY TYPE

- Customer stories

- Events & webinars

- Ebooks & reports

- Business insights

- GitHub Skills

* SUPPORT & SERVICES

- Documentation

- Customer support

- Community forum

- Trust center

- Partners

View all resources

* Open Source

* COMMUNITY

- GitHub Sponsors Fund open source developers

* PROGRAMS

- Security Lab

- Maintainer Community

- GitHub Stars

- Archive Program

* REPOSITORIES

- Topics

- Trending

- Collections

* Enterprise

* ENTERPRISE SOLUTIONS

- Enterprise platform AI-powered developer platform

* AVAILABLE ADD-ONS

- GitHub Advanced Security Enterprise-grade security features

- Copilot for Business Enterprise-grade AI features

- Premium Support Enterprise-grade 24/7 support

- Pricing

Search/

Sign in

Sign up

Appearance settings

You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert

{{ message }}

1. NenadZivotic 2. secret-leak-scan-lite

Repository navigation

- Code

- Issues

- Pull requests

- Actions

- Projects

- Security and quality

- Insights

More items

[](https://github.com/NenadZivotic/secret-leak-scan-lite)

!Image 1: NenadZivotic

**secret-leak-scan-lite**

Public

- NotificationsYou must be signed in to change notification settings

- Fork 0(0)

- Star 0(0)You must be signed in to star a repository

About

No description or website provided.

Topics

cli-tooldevopsgitnodejssecret-scanningsecurity

Resources

Readme

Activity

Stars

**0** stars

Watchers

**0** watching

Forks

**0** forks

Report repository

main

**1**Branch**0**Tags

[](https://github.com/NenadZivotic/secret-leak-scan-lite/branches)[](https://github.com/NenadZivotic/secret-leak-scan-lite/tags)

Go to file

Code

Open more actions menu

Latest commit

![Image 2: NenadZivotic](https://github.com/NenadZivotic)NenadZivotic

Link full version to SkillHQ listing

Oct 27, 2026

caa88d7·Oct 27, 2026

History

3 Commits

Open commit details

[](https://github.com/NenadZivotic/secret-leak-scan-lite/commits/main/)3 Commits

Folders and files

| Name | Name | Last commit message | Last commit date | | --- | --- | --- | --- | | [scripts](https://github.com/NenadZivotic/secret-leak-scan-lite/tree/main/scripts "scripts") | [scripts](https://github.com/NenadZivotic/secret-leak-scan-lite/tree/main/scripts "scripts") | | | | [test](https://github.com/NenadZivotic/secret-leak-scan-lite/tree/main/test "test") | [test](https://github.com/NenadZivotic/secret-leak-scan-lite/tree/main/test "test") | | | | [README.md](https://github.com/NenadZivotic/secret-leak-scan-lite/blob/main/README.md "README.md") | [README.md](https://github.com/NenadZivotic/secret-leak-scan-lite/blob/main/README.md "README.md") | | | | [SKILL.md](https://github.com/NenadZivotic/secret-leak-scan-lite/blob/main/SKILL.md "SKILL.md") | [SKILL.md](https://github.com/NenadZivotic/secret-leak-scan-lite/blob/main/SKILL.md "SKILL.md") | | | | View all files |

Repository files navigation

- README

More items

secret-leak-scan-lite

[](https://github.com/NenadZivotic/secret-leak-scan-lite#secret-leak-scan-lite)

Free agent skill: statically scan a project directory for leaked credentials before committing. Masked fingerprints only — raw secret values are never emitted.

Detects: AWS access key IDs, GitHub personal access tokens, Slack tokens, PEM private-key blocks.

Install

[](https://github.com/NenadZivotic/secret-leak-scan-lite#install)

undefinedshell npx skills add NenadZivotic/secret-leak-scan-lite undefined

or clone into your agent's skill directory:

undefinedshell git clone <repo> ~/.claude/skills/secret-leak-scan-lite undefined

Use

[](https://github.com/NenadZivotic/secret-leak-scan-lite#use)

Requires Node 18+, zero dependencies.

undefinedshell node scripts/scan.mjs <directory> undefined

JSON report on stdout. Exit code `1` when findings are present — drop it straight into a pre-commit hook or CI step.

Full version

[](https://github.com/NenadZivotic/secret-leak-scan-lite#full-version)

This is the lite edition. The full `secret-leak-scan` skill adds:

- `.asar` bundle scanning (Electron release checks)

- Stripe live keys, Google API keys, fine-grained GitHub PATs

- Complete triage & rotation workflow, git-history cleanup, CI gate recipe

Full version on SkillHQ — also inside the `security-audit-bundle-8-skills` bundle ($29, 8 security skills).

About

No description or website provided.

Topics

cli-tooldevopsgitnodejssecret-scanningsecurity

Resources

Readme

Activity

Stars

**0** stars

Watchers

**0** watching

Forks

**0** forks

Report repository

Releases

Packages

Contributors

Languages

Footer

[](https://github.com/) © 2026 GitHub,Inc.

Footer navigation

- Terms

- Privacy

- Security

- Status

- Community

- Docs

- Contact

- Manage cookies

- Do not share my personal information

You can’t perform that action at this time.