SecretSentinel scans your code in real-time and flags hardcoded
API keys, passwords and credentials before you commit them.
Unlike GitHub's secret scanning which catches leaks after you
push, this stops them at the source — your editor.
Uses Shannon entropy scoring to catch secrets that don't match
any known pattern. Also scans git history, compares .env files,
and generates security reports.
Free. Works offline. Your code never leaves your machine.