v0.1.0 - Initial Release

shhh-scan v0.1.0

Scan AI coding assistant session files for leaked secrets.

Features

• 20+ secret detection patterns (AWS, GitHub, Slack, Stripe, SSH keys, etc.)
• Shannon entropy analysis with 5-layer false positive filtering
• Auto-discovers Claude, Codex, Copilot sessions (including variant dirs like ~/.claude-hd)
• Context-aware severity scoring (user_input, ai_output, tool_result, config)
• Multiple output formats: text, JSON, SARIF, dashboard TUI
• .shhhignore rule engine for suppressing known false positives
• Incremental scanning with state persistence
• Real-time watch mode
• Secret redaction with backup support
• Git hook integration (pre-commit/pre-push)
• Custom rule definitions

Install

npm install -g shhh-scan
shhh scan