code.secretsSecrets in source
Detects committed credentials (cloud keys, tokens, private keys, connection strings, high-entropy passwords) and tracked .env files.
- Engine
- Built-in
- Targets
- Codebase
- Areas
- Security
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only code.secretsBuilt into openaudit; nothing to install.