GitHub
GitHub Packages
@catesworks/secret-scan is a restricted package on GitHub Packages, not on the public npm registry.
Point the @catesworks scope at https://npm.pkg.github.com in an .npmrc and authenticate with a token that has read:packages.
Keep the token line single-quoted in the .npmrc: npm expands ${NODE_AUTH_TOKEN} when it reads the file, so the token is never written to disk.
A tag v* publishes a new version after the tests and a check that the package holds exactly the four modules, package.json, LICENSE and README.md.
More integrations
All integrations →- 01
gitleaks
gitleaks scans with the generated config; the gitleaks filter classifies its JSON report.
- 02
trufflehog
Pipe trufflehog’s NDJSON into the trufflehog filter.
- 03
GitHub Actions
A copy-paste job installs the package into a scratch directory, scans the full history, filters and fails on private findings.