v1.4.0

Labeled assignments, xAI/Perplexity prefixes, and GitHub Release binaries. npm and PyPI pages now describe the product, not just the wrapper.

Install:

go install github.com/umeraamir69/secsentry/cmd/secsentry@v1.4.0

Wrappers (still need the Go binary on PATH): pip install secsentry / npx secsentry.

Added

• Unquoted API_KEY= / SECRET_KEY= / ACCESS_TOKEN= when the value is high-entropy
• Labeled PASSWORD= / passwd= / pwd= with the same entropy gate (the password is … in a sentence still does not fire)
• xAI (xai-) and Perplexity (pplx-) prefixes
• GitHub Release binaries via GoReleaser (linux/darwin/windows, amd64/arm64)

Not in this version

• Generic passwords in prose, unlabeled high-entropy blobs, vendor HTTP verify, an unmask flag

ProwlBench numbers on the README are 1.2.0 only. Do not cite them as 1.4.0.

SecSentry 1.3.1

go install for v1.3.0 failed: Go will not zip a file path that contains an em dash.

Install this tag:

go install github.com/umeraamir69/secsentry/cmd/secsentry@v1.3.1

Same detectors as 1.3.0. The only change is renaming notes/Feature evaluation — platform and SAST.md to an ASCII hyphen so the module zip is valid.

SecSentry 1.3.0

Do not use this tag. go install ...@v1.3.0 fails because a notes filename contained an em dash, which Go module zips reject.

Use v1.3.1 instead:

go install github.com/umeraamir69/secsentry/cmd/secsentry@v1.3.1