# secretlint/secretlint

Pluggable linting tool to prevent committing credential.

Repository: https://github.com/secretlint/secretlint
Canonical: https://ross.abutalabs.com/products/secretlint
Language: TypeScript
License: MIT
License Family: permissive
Topics: secret, credential, lint, linting, git, nodejs, docker
Last push: 2026-08-24T05:04:55+00:00

## Health v2 (maintenance only)
Score: 99/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 99, longevity 100
- inputs: {"age_days": 2398, "days_push": 9, "days_rel": 7, "gap_med": 7.0, "n_releases_24m": 47}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1441, forks 53 (observed 2026-08-28T04:04:44.327994+00:00)

## What it is
Secretlint is a pluggable linting tool that scans projects for committed credentials and secrets, reporting matches with explanations. It runs via Node.js or Docker, integrates with CI and pre-commit hooks, and supports custom rules.

## Use cases
- prevent committing api keys and passwords to git
- scan a repo for leaked credentials before pushing
- add secret scanning to CI pipeline
- set up a pre-commit hook that blocks credential files
- write custom rules to detect organization-specific secrets

## When to choose
- you want an ESLint-style, pluggable secret scanner for Node.js projects
- you need a zero-config Docker-based secret scan of any directory
- you want CI and pre-commit integration for credential leak prevention

## When to avoid
- you need full git-history secret scanning rather than working-tree scanning
- you prefer a non-JavaScript toolchain outside Node.js/Docker ecosystems

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, linter, cli, developer-tools
- domain: security, developer-tools, version-control
- platform: cli, cross-platform
- tags: secret-detection, credential-scanning, pre-commit, ci-integration, pluggable-rules, nodejs, docker

## Member repositories
- secretlint/secretlint (main) score 99

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:44.327994+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:36:29.588251+00:00, confidence not recorded.
  - readme: https://github.com/secretlint/secretlint (fetched 2026-08-28T04:04:44.327994+00:00, sha 4c96dfeb0c8c)
  - registry_npm: https://registry.npmjs.org/secretlint (fetched 2026-08-29T11:47:03.029884+00:00, sha b07abab29f0c)
- Data as of 2026-08-30T08:39:29.467469+00:00.