vishrut19/KeySentinel PR Secret Scanner
Detect and prevent leaked API keys and secrets in Pull Requests with automated scanning and prevention.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| github_token | GitHub token for API access | yes | ${{ github.token }} |
| fail_on | Fail the workflow if secrets found at this severity or higher (high|medium|low|off) | no | high |
| post_no_findings | Post a comment even when no secrets are found | no | false |
| ignore | Comma-separated file glob patterns to ignore | no | "" |
| allowlist | Comma-separated regex patterns for allowed strings | no | "" |
| max_files | Maximum number of files to scan | no | 100 |
| config_path | Path to config file | no | .keysentinel.yml |
Outputs
| name | description |
|---|---|
| secrets_found | Number of secrets found |
| findings | JSON string of all findings |