Haul v0.2.0

Haul 0.2.0: the first public release

What would an infostealer find on your machine? Haul answers that in one read-only pass, ranks every
exposed secret by real risk, and tells you how to fix each one, without ever reading a secret out.

pip install haul-scanner

Highlights

• Nine scanners, one pass: cloud and package CLIs, SSH keys, .env files, shell and PowerShell
  history, environment variables, browsers, desktop apps and sensitive files.
• AI coding tools: Claude Code, Claude Desktop, Cursor, VS Code (Copilot chat), Windsurf, Cline,
  Roo Code, Codex, Gemini CLI, Continue, Zed and Aider, including their SQLite chat stores.
• 58 provider rules plus heuristics and strict false-positive filters, with a 0–100 exposure score.
• Git aware: ignored, not ignored, or already committed.
• Five report formats: terminal, self-contained HTML, JSON, CSV and SARIF 2.1.0.
• --clean: opt-in, byte-exact redaction of leaked keys from AI-chat history, with a backup first.

Safety by construction

Secrets are sealed in memory the moment they're found; reports carry only a non-reversible fingerprint.
An output firewall checks every byte, an irreversible audit hook blocks all network access and
subprocesses, and network paths are refused before they are touched.

Requirements

Python 3.11 or newer on Windows or Linux. No runtime dependencies.

Verify the download

File	SHA-256
haul_scanner-0.2.0-py3-none-any.whl	9f737f4c51f3a288469ea3f439a657206a93a3700c95154d1d74d0968a2765af

Full details are in the changelog and the
README.