repo-security-scan
Scan repositories for hardcoded secrets, API keys, and credentials before they leak into version control.
Key Value Proposition
Find and fix leaked credentials before attackers do, with configurable scans that surface critical secrets instantly and enable continuous monitoring via cron or scheduled daemons.
Summary
Repo Security Scanner is a Python-based CLI tool that recursively traverses repository directories and applies configurable regex patterns to detect hardcoded secrets, API keys, tokens, passwords, and other sensitive data. Built for developers and DevOps teams auditing their own code in an era of AI-generated and collaborative development, it supports full, quick, and incremental Git-aware scan modes, severity classification, and deduplication. Use it via the Python CLI, standalone scanner, shell script, scheduled daemon, or an MCP server for AI assistants, with YAML configuration for custom detection rules.
Proof Points
- Three scan modes: full (all files), quick (critical patterns only), and incremental (Git changes since a reference, default HEAD~1)
- Detects AWS credentials, GitHub tokens, private keys, cloud provider secrets, and generic credentials with CRITICAL/HIGH/MEDIUM/LOW severity classification
- Includes an MCP server for AI assistants plus scheduled monitoring with SMTP email alerts and consolidated GitHub profile-wide scans
- Runs entirely from source with no formal packaging; binary and large files are automatically skipped
About
Repo Security Scanner A Python-based CLI tool for scanning local repositories and source code directories to detect hardcoded secrets, API keys, tokens, passwords, and other sensitive data before they leak into version control.
User Reviews
Genuine feedback from the developer community.
You must be signed in to leave a review.
No reviews yet. Be the first to review this project!
Are you the author of this project?
Claim this pre-seeded listing to manage details, edit tags, or upload assets.
Please sign in using the button in the header to claim repository ownership.
List your project with one command.