Skip to content

Releases: featurecreep-cron/secretscreen

v0.1.0

14 Mar 23:12
0007635

Choose a tag to compare

Initial release of secretscreen.

Detect and redact secrets in key-value pairs, dicts, and environment variables.

Features

  • 5 detection layers: key-name denylist, structured value parsing, 221 gitleaks format patterns, URL credential detection, Shannon entropy
  • Two modes: NORMAL (layers 1-4) and AGGRESSIVE (adds entropy)
  • Audit API returns structured findings without mutating values
  • Safe suffix system prevents false positives on keys like TOKEN_URL, PASSWORD_FILE
  • Partial URL redaction preserves username/host for debugging

Install

pip install secretscreen