2 Commits

Author	SHA1	Message	Date
Dani	d3ce23847f	feat: improve secret-scanner hook with stdin JSON parsing ... - Update description to list 30+ supported providers - Simplify hook command by removing git commit grep filter - Parse Claude Code JSON input from stdin to detect git commit - Handle git commit -a and chained git add && git commit scenarios Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-28 20:21:52 -05:00
Daniel Avila	2f667130ad	feat: Add secret-scanner hook for detecting hardcoded credentials (#304) ... Added new security hook that automatically scans staged files before git commits to detect: - API keys (AWS, OpenAI, Stripe, Google, GitHub, SendGrid, Twilio, Mailgun) - Authentication tokens and passwords - Private keys (RSA, SSH, OpenSSH) - Database connection strings (MySQL, PostgreSQL, MongoDB, SQL Server) - JWT tokens, Slack tokens, Telegram bot tokens, Discord webhooks Features: - Multi-pattern regex detection with severity levels (critical, high, medium, low) - Excludes false positives from comments with "example" or "placeholder" - Skips binary files, lock files, and excluded directories - Provides clear error messages with fix suggestions - Suggests environment variables and secrets management services Files: - cli-tool/components/hooks/security/secret-scanner.json - cli-tool/components/hooks/security/secret-scanner.py Co-authored-by: Claude <noreply@anthropic.com>	2026-01-24 18:07:22 -05:00