scan_secrets_history
Scan git history to find leaked secrets, including those later removed, and identify whether each secret is still active or requires rotation.
Instructions
Scan git history for leaked secrets. Finds secrets that were committed in the past — even if they were later removed. Marks each finding as 'active' (still in code) or 'removed' (in git history only, needs rotation).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Repository root path | |
| format | No | Output format | markdown |
| max_commits | No | Maximum number of commits to scan |