Skip to content

Releases: NodeSaint/SecretSentry

Secrets Sentry v1.0.0 - For the Vibecoders Community

15 Oct 09:45

Choose a tag to compare

Secrets Sentry v1.0.0

First public release of Secrets Sentry - a comprehensive security tool for detecting, migrating, and preventing hardcoded secrets from being leaked to GitHub.

For the Vibecoders Community

This project was built with the hope that vibecoders everywhere will use it to ensure they're not accidentally leaking secrets in their code. Whether you're a solo developer, part of a team, or contributing to open source - protecting your API keys and credentials is essential.

We encourage all vibecoders to:

  • Run Secrets Sentry before pushing code to GitHub
  • Install the pre-commit hook for automatic protection
  • Share this tool with your coding community
  • Help keep the vibecoding ecosystem secure

Let's build together, securely!

Key Features

Secret Detection

  • 42 secret patterns covering major providers (AWS, OpenAI, Slack, Discord, GitHub, Anthropic, Azure, GCP, Stripe, Twilio, Firebase, and more)
  • Shannon entropy detection with configurable threshold
  • Filename-based heuristics for suspicious files
  • Git history scanning to find secrets in previous commits

Secret Remediation

  • Interactive fix workflow to review and migrate secrets
  • Automatic code refactoring using AST-based tools
  • Environment variable migration with proper naming conventions
  • Automatic backup creation before modifications

Prevention

  • Pre-commit hook integration for automatic blocking
  • Beautiful error messages with remediation suggestions
  • Easy installation with interactive CLI

Web Dashboard

  • FastAPI-based web interface at http://localhost:8000
  • Summary statistics and findings table
  • Settings management and webhook testing

Quick Start

# Clone the repository
git clone https://github.com/NodeSaint/SecretSentry.git
cd SecretSentry

# Install dependencies
pip install -r requirements.txt

# 1. Scan for secrets
python -m scripts.scan

# 2. Review and create migration plan
python -m scripts.fix

# 3. Add secrets to environment variables

# 4. Verify setup
python -m scripts.verify

# 5. Install pre-commit hook
python -m scripts.install_hook

Technical Details

  • Python 3.9+ required
  • 203 unit and integration tests
  • Type hints throughout codebase
  • Pydantic-based configuration system
  • GitPython for history scanning
  • Rich for beautiful CLI output

Installation

git clone https://github.com/NodeSaint/SecretSentry.git
cd SecretSentry
pip install -r requirements.txt
python -m scripts.scan

Full Changelog: https://github.com/NodeSaint/SecretSentry/blob/main/CHANGELOG.md