secretlint: Pluggable linting tool to prevent committing credential

by ddos · July 9, 2024

Secretlint is that Pluggable linting tool to prevent committing credentials.

Secretlint support --maskSecrets option that mask secrets in lint error message. It is useful that you want to hide secrets in CI logs.

$ secretlint --maskSecrets "**/*"

Secretlint can not fix the secrets automatically. However, It is useful that --format=mask-result mask the secrets of input file.

For example, you can mask the secrets of .zsh_history file and overwrite it.

$ secretlint .zsh_history --format=mask-result --output=.zsh_history

This web extension aim to founds credentials that are included in your request/response.

Secretlint WebExtension integrates to DevTools in Chrome/Firefox. This extension helps web developers to notice exposed credentials.

Secretlint rules has been implemented as separated modules.

Also, Secretlint provide rule preset that includes recommened rule set.