SecretSentinel
Detect hardcoded secrets in VS Code before you commit them
What is SecretSentinel?
SecretSentinel scans your code in real-time and flags hardcoded API keys, passwords and credentials before you commit them. Unlike GitHub's secret scanning which catches leaks after you push, this stops them at the source — your editor. Uses Shannon entropy scoring to catch secrets that don't match any known pattern. Also scans git history, comparesenv files, and generates security reports. Free. Works offline. Your code never leaves your machine.
Screenshots
?
No comments yet. Be the first!
Real conversations about SecretSentinel on X
Post on X