secretlint/secretlint

Health v2 · maintenance only

Adoption not part of the score

1441 stars · 53 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Secretlint is a pluggable linting tool that scans projects for committed credentials and secrets, reporting matches with explanations. It runs via Node.js or Docker, integrates with CI and pre-commit hooks, and supports custom rules.

Use cases

• prevent committing api keys and passwords to git
• scan a repo for leaked credentials before pushing
• add secret scanning to CI pipeline
• set up a pre-commit hook that blocks credential files
• write custom rules to detect organization-specific secrets

When to choose

• you want an ESLint-style, pluggable secret scanner for Node.js projects
• you need a zero-config Docker-based secret scan of any directory
• you want CI and pre-commit integration for credential leak prevention

When to avoid

• you need full git-history secret scanning rather than working-tree scanning
• you prefer a non-JavaScript toolchain outside Node.js/Docker ecosystems

Facets

cli-tool · maturity active

security linter cli developer-tools security developer-tools version-control cli cross-platform secret-detection credential-scanning pre-commit ci-integration pluggable-rules nodejs docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="secretlint/secretlint")