davila7__claude-code-templates

skills/davila7__claude-code-templates

Fork 0

mirror of https://github.com/davila7/claude-code-templates.git synced 2026-09-19 01:30:23 +08:00

Commit Graph

Author	SHA1	Message	Date
Dani	d3ce23847f	feat: improve secret-scanner hook with stdin JSON parsing - Update description to list 30+ supported providers - Simplify hook command by removing git commit grep filter - Parse Claude Code JSON input from stdin to detect git commit - Handle git commit -a and chained git add && git commit scenarios Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-28 20:21:52 -05:00
Dani	b5c377ae6c	feat: expand secret scanner patterns and add skills support - Add 25+ new secret detection patterns to secret-scanner.py (Anthropic, Google OAuth, GitLab, Vercel, Supabase, Hugging Face, Replicate, Groq, Databricks, Azure, Cloudflare, DigitalOcean, Linear, Notion, Figma, npm, PyPI tokens) - Fix regex escaping in security-scanner.json (single quote matching) - Add skills component type to Discord bot interactions - Add Linear MCP server to .mcp.json - Update .gitignore for opsx commands, skills, and openspec dirs - Regenerate components.json catalog Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-28 19:13:48 -05:00
Daniel Avila	2f667130ad	feat: Add secret-scanner hook for detecting hardcoded credentials (#304 ) Added new security hook that automatically scans staged files before git commits to detect: - API keys (AWS, OpenAI, Stripe, Google, GitHub, SendGrid, Twilio, Mailgun) - Authentication tokens and passwords - Private keys (RSA, SSH, OpenSSH) - Database connection strings (MySQL, PostgreSQL, MongoDB, SQL Server) - JWT tokens, Slack tokens, Telegram bot tokens, Discord webhooks Features: - Multi-pattern regex detection with severity levels (critical, high, medium, low) - Excludes false positives from comments with "example" or "placeholder" - Skips binary files, lock files, and excluded directories - Provides clear error messages with fix suggestions - Suggests environment variables and secrets management services Files: - cli-tool/components/hooks/security/secret-scanner.json - cli-tool/components/hooks/security/secret-scanner.py Co-authored-by: Claude <noreply@anthropic.com>	2026-01-24 18:07:22 -05:00

Author

SHA1

Message

Date

Dani

d3ce23847f

feat: improve secret-scanner hook with stdin JSON parsing

- Update description to list 30+ supported providers
- Simplify hook command by removing git commit grep filter
- Parse Claude Code JSON input from stdin to detect git commit
- Handle git commit -a and chained git add && git commit scenarios

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-28 20:21:52 -05:00

Dani

b5c377ae6c

feat: expand secret scanner patterns and add skills support

- Add 25+ new secret detection patterns to secret-scanner.py (Anthropic,
  Google OAuth, GitLab, Vercel, Supabase, Hugging Face, Replicate, Groq,
  Databricks, Azure, Cloudflare, DigitalOcean, Linear, Notion, Figma,
  npm, PyPI tokens)
- Fix regex escaping in security-scanner.json (single quote matching)
- Add skills component type to Discord bot interactions
- Add Linear MCP server to .mcp.json
- Update .gitignore for opsx commands, skills, and openspec dirs
- Regenerate components.json catalog

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-28 19:13:48 -05:00

Daniel Avila

2f667130ad

feat: Add secret-scanner hook for detecting hardcoded credentials (#304 )

Added new security hook that automatically scans staged files before git commits to detect:
- API keys (AWS, OpenAI, Stripe, Google, GitHub, SendGrid, Twilio, Mailgun)
- Authentication tokens and passwords
- Private keys (RSA, SSH, OpenSSH)
- Database connection strings (MySQL, PostgreSQL, MongoDB, SQL Server)
- JWT tokens, Slack tokens, Telegram bot tokens, Discord webhooks

Features:
- Multi-pattern regex detection with severity levels (critical, high, medium, low)
- Excludes false positives from comments with "example" or "placeholder"
- Skips binary files, lock files, and excluded directories
- Provides clear error messages with fix suggestions
- Suggests environment variables and secrets management services

Files:
- cli-tool/components/hooks/security/secret-scanner.json
- cli-tool/components/hooks/security/secret-scanner.py

Co-authored-by: Claude <noreply@anthropic.com>

2026-01-24 18:07:22 -05:00

3 Commits