secret-guard: zero‑dependency Python scanner that finds hard‑coded secrets before git
secret-guard scans source files for hard‑coded credentials using pattern rules and entropy detection, masking values by default. It works as a CLI, a pre‑commit hook, or a CI step, and can scan staged files directly from the git index. This helps developers and DevOps teams prevent accidental secret leaks in repositories without adding extra dependencies. Compared to tools like gitleaks, it offers a lightweight pure‑Python implementation with built‑in git awareness.
View on GitHub →taksh1507/secret-guard