Install payload
Install payload is mixed and needs spot-checking.
50% (1/2)
Browse the directory
/
Showing 2 resources for "gitleaks"
Saved
/ search · [ ] view density · esc clear input
Active
Rollout signal scan
2 rollout risk signals in current results
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
watch
Most at-risk entries in this view
Adoption queue
Browse adoption queue · balanced
1/2 visible results are in hold tier and need mitigation before adoption.
ready 0caution 1hold 1
Pre-Write Secret Scanner - Claude Code Hook
1 blockers: Metadata review
caution
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/pre-write-secret-scanner · trust review · confidence 67%
Gitleaks
2 blockers: Metadata review, Install payload
hold
36/100
Request metadata review from maintainers or internal owners.
Add install/config payload for reproducible team rollout.
Collect package checksum or signed artifact information.
tools/gitleaks · trust review · confidence 50%
Decision confidence
Decision confidence scan · balanced
1/2 results are low-confidence and need review before adoption.
high 0medium 1low 1
Pre-Write Secret Scanner - Claude Code Hook
Address Metadata review, Package integrity before broader rollout.
medium
54/100
Missing: Metadata reviewMissing: Package integrity
hooks/pre-write-secret-scanner · trust review
Gitleaks
Hold adoption until Metadata review, Package integrity are resolved.
low
36/100
Missing: Metadata reviewMissing: Package integrityMissing: Install payload
tools/gitleaks · trust review
Freshness distribution
Current results are broadly fresh
Median age 47 days; all 2 scanned entries are within 90 days.
Gitleaksby Gitleaks · submitted by oktofeesh1
Open-source secret scanner for finding passwords, API keys, tokens, and other credentials in git history, files, directories, and stdin.
PreToolUse hook that scans the exact text Claude Code is about to write or edit for high-confidence secret formats (AWS access keys, GitHub tokens, OpenAI keys, Slack tokens, Google API keys, Stripe keys, and private key blocks) and blocks the write with a non-zero exit before the secret ever reaches disk.