Releases: NodeSaint/SecretSentry
Releases · NodeSaint/SecretSentry
Secrets Sentry v1.0.0 - For the Vibecoders Community
Secrets Sentry v1.0.0
First public release of Secrets Sentry - a comprehensive security tool for detecting, migrating, and preventing hardcoded secrets from being leaked to GitHub.
For the Vibecoders Community
This project was built with the hope that vibecoders everywhere will use it to ensure they're not accidentally leaking secrets in their code. Whether you're a solo developer, part of a team, or contributing to open source - protecting your API keys and credentials is essential.
We encourage all vibecoders to:
- Run Secrets Sentry before pushing code to GitHub
- Install the pre-commit hook for automatic protection
- Share this tool with your coding community
- Help keep the vibecoding ecosystem secure
Let's build together, securely!
Key Features
Secret Detection
- 42 secret patterns covering major providers (AWS, OpenAI, Slack, Discord, GitHub, Anthropic, Azure, GCP, Stripe, Twilio, Firebase, and more)
- Shannon entropy detection with configurable threshold
- Filename-based heuristics for suspicious files
- Git history scanning to find secrets in previous commits
Secret Remediation
- Interactive fix workflow to review and migrate secrets
- Automatic code refactoring using AST-based tools
- Environment variable migration with proper naming conventions
- Automatic backup creation before modifications
Prevention
- Pre-commit hook integration for automatic blocking
- Beautiful error messages with remediation suggestions
- Easy installation with interactive CLI
Web Dashboard
- FastAPI-based web interface at http://localhost:8000
- Summary statistics and findings table
- Settings management and webhook testing
Quick Start
# Clone the repository
git clone https://github.com/NodeSaint/SecretSentry.git
cd SecretSentry
# Install dependencies
pip install -r requirements.txt
# 1. Scan for secrets
python -m scripts.scan
# 2. Review and create migration plan
python -m scripts.fix
# 3. Add secrets to environment variables
# 4. Verify setup
python -m scripts.verify
# 5. Install pre-commit hook
python -m scripts.install_hookTechnical Details
- Python 3.9+ required
- 203 unit and integration tests
- Type hints throughout codebase
- Pydantic-based configuration system
- GitPython for history scanning
- Rich for beautiful CLI output
Installation
git clone https://github.com/NodeSaint/SecretSentry.git
cd SecretSentry
pip install -r requirements.txt
python -m scripts.scanFull Changelog: https://github.com/NodeSaint/SecretSentry/blob/main/CHANGELOG.md