scan_secrets_history
Scan git history for leaked secrets, including those committed and later removed. Marks each finding as active or removed to prioritize rotation.
Instructions
Scan git history for leaked secrets. Finds secrets that were committed in the past — even if they were later removed. Marks each finding as 'active' (still in code) or 'removed' (in git history only, needs rotation).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Repository root path | |
| format | No | Output format | markdown |
| max_commits | No | Maximum number of commits to scan |