ruddxxy/FlashAudit Secrets Scanner
High-performance secrets scanner - 4-10x faster than Gitleaks on real corpora (benchmarks in repo)
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to scan (default: current directory) | no | . |
| format | Output format: json or sarif | no | sarif |
| fail-on-finding | Fail the workflow if secrets are found | no | true |
| git-diff | Only scan files changed since this ref (e.g., main, HEAD~1) | no | "" |
| staged-only | Only scan staged files | no | false |
| entropy | Enable entropy-based detection | no | false |
| entropy-threshold | Entropy threshold (default: 4.5) | no | 4.5 |
| rules | Path to custom rules.yaml file | no | "" |
| version | FlashAudit version to use (default: latest) | no | latest |
| upload-sarif | Upload SARIF results to GitHub Security tab | no | true |
Outputs
| name | description |
|---|---|
| findings-count | Number of secrets found |
| sarif-file | Path to SARIF output file (if format=sarif) |
| exit-code | Exit code from FlashAudit (0=clean, 1=findings, 2=error) |