Add secrets-scanner plugin for detecting leaked credentials #3
+2,365
−0
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This plugin provides comprehensive knowledge and capabilities for: - Scanning repositories with gitleaks, git-secrets, and TruffleHog - Setting up CI/CD pipelines (GitHub Actions) to guard against secret leaks - Comparing tools to choose the right one for specific use cases - Configuring custom detection rules and allowlists Commands added: - scan-gitleaks: Scan with gitleaks - scan-git-secrets: Scan with AWS git-secrets - scan-trufflehog: Scan with TruffleHog (includes verification) - scan-all: Comprehensive scan with all three tools - compare: Tool comparison guide - ci-setup: GitHub Actions workflow setup - install: Installation instructions - configure: Configuration guide Documentation includes: - CLI references for all three tools - Version info (gitleaks v8.30.0, trufflehog v3.92.5) - Links to repos, releases, and official docs https://claude.ai/code/session_01VeM4EmjpXmxfcjML4hKRFA
18 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
This PR introduces a new
secrets-scannerplugin that provides comprehensive capabilities for detecting leaked secrets and credentials in codebases using three industry-leading tools: gitleaks, git-secrets, and TruffleHog.Key Changes
Plugin Registration: Added
secrets-scannerentry to.claude-plugin/marketplace.jsonPlugin Metadata: Created
plugins/secrets-scanner/.claude-plugin/plugin.jsonwith plugin configurationComprehensive Documentation: Added detailed README covering:
Command Documentation: Created detailed guides for 8 commands:
/secrets-scanner:scan-gitleaks- Scan with gitleaks/secrets-scanner:scan-git-secrets- Scan with git-secrets/secrets-scanner:scan-trufflehog- Scan with TruffleHog/secrets-scanner:scan-all- Run all three tools for maximum coverage/secrets-scanner:compare- Compare tools to help choose the right one/secrets-scanner:ci-setup- Set up GitHub Actions workflows/secrets-scanner:install- Install the scanning tools/secrets-scanner:configure- Configure custom rules and allowlistsNotable Implementation Details
.gitleaks.toml, git config patterns, and TruffleHog exclusionsThis plugin enables developers and security teams to choose the right secret scanning tool(s) for their needs and provides complete guidance for installation, configuration, and CI/CD integration.
https://claude.ai/code/session_01VeM4EmjpXmxfcjML4hKRFA