A Git-native secret detection CLI with pre-commit enforcement, CI scanning, and policy-as-code validation for DevSecOps pipelines.
-
Updated
May 11, 2026 - Python
A Git-native secret detection CLI with pre-commit enforcement, CI scanning, and policy-as-code validation for DevSecOps pipelines.
Security-first CI/CD pipeline — Gitleaks secret scanning, SonarQube SAST, Trivy CVE scanning with kill switch. Real CRITICAL CVE detected, fixed, and redeployed. Defence-in-depth across every stage.
Add a description, image, and links to the secretscanning topic page so that developers can more easily learn about it.
To associate your repository with the secretscanning topic, visit your repo's landing page and select "manage topics."