Secretlint

What Secretlint is

Secretlint is a free, open-source linting tool that scans projects for credentials to help prevent them from being committed to Git. Its command line can scan files, glob patterns, or standard input. Detection rules are separate modules, and custom rules can be packaged as npm packages. Secret values are masked in lint error messages by default, helping reduce their exposure in terminal output and logs. The project documents pre-commit setups with Husky and lint-staged, pre-commit, and Git hooks, as well as GitHub Actions runs and pull-request annotations. Other listed integrations include Mega-Linter, SARIF formatting, a macOS clipboard app, and a browser extension. The extension works with Chrome and Firefox DevTools to help developers notice credentials in requests and responses. Secretlint can be installed with Node.js, run in Docker, or used as a single-executable binary without Node.js. The Node.js installation instructions require version 22 or later. Secretlint does not automatically fix detected secrets, though a formatter can mask secrets in an input file. It is MIT-licensed and supports Linux, macOS, Windows, and extensions.