PIX REGISTRY
secret-scan
secret-scan v1.0.0
Hardcoded-secret detection — AWS keys, GitHub PATs, Slack tokens, Stripe keys, generic high-entropy strings. Pre-commit (`--staged-only`), explicit paths, or full repo. Use when guarding `git commit`, auditing a repo for leaked credentials, validating no secrets entered the diff before push, or producing a rotation list for an exposed-secret incident.
Skill by vulnetix, published 2026-10-07. License Apache-2.0. Schema pix.skill/v1.
Tags: pix, vulnetix, official, security