dukotah/LeakCheck Secret Scanner
Scan your repo for hard-coded API keys, tokens, and secrets on every push or PR. Zero dependencies, runs in seconds.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| paths | Comma- or newline-separated paths to scan, relative to the repo root. Default scans the whole checkout. | no | . |
| fail-on | Minimum severity that fails the build: critical, high, medium, low, or none. Default: high. | no | high |
| ignore | Comma- or newline-separated path globs to skip (e.g. 'test/fixtures/*, *.snap'). '*' is a wildcard. | no | "" |
| max-file-kb | Skip files larger than this many KB. Default: 1024. | no | 1024 |
Outputs
| name | description |
|---|---|
| findings-count | Total number of potential secrets found. |
| critical-count | Number of critical-severity findings. |
| high-count | Number of high-severity findings. |
| blocking-count | Number of findings at or above the fail-on threshold. |