我用Python写了个检测硬编码密钥的CLI工具

dev.to · AI#安全#Python#开源

Editor brief · 编辑速览

零依赖 Python CLI，可检测代码中的硬编码密钥、.env 漂移和 gitignore 错误，在 push 前拦截泄露风险。

文章思维导图

Knowledge map

拖拽缩放

Full translation

完整中文译文

一个小巧、零依赖的 Python CLI，能在推送之前捕获硬编码的密钥、.env 漂移和 .gitignore 错误——它诞生于开发过程中一次真实差点泄露 GitHub token 的经历。

If this saves you from a leaked key someday, a ⭐ on GitHub helps other people find it too.

For further actions, you may consider blocking this person and/or reporting abuse

We're a place where coders share, stay up-to-date and grow their careers.