detect_secrets
Scan any repository for hardcoded secrets like API keys, tokens, and passwords. Get findings with type, location, confidence, and remediation advice—no indexing needed.
Instructions
Scan a repository for hardcoded credentials and secrets (API keys, tokens, passwords, private keys). Returns findings with type, location, confidence, and remediation advice.
No prior indexing required.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| repo_path | Yes | Path to the repository to scan | |
| exclude_tests | No | Exclude test files from scan results (files matching test_*, *_test.*, tests/, etc.). Default: false |