Secret Scanning
github/awesome-copilotSecret scanning finds leaked passwords, API keys, or other sensitive data in your code. It helps developers and security teams catch secrets before they cause problems. You can set it up to scan your whole Git history, issues, and pull requests.
Push protection stops secrets from being pushed to GitHub by mistake. It blocks the push immediately and shows you a warning. You can then remove the secret and try again.
This guide also covers custom patterns for your own secret types and how to handle alerts when a secret is found. It even explains how to scan code before you commit using an AI coding agent.
Add Secret Scanning skill to your workflow
Global
mkdir -p ~/.claude/skills/secret-scanningProject
mkdir -p .claude/skills/secret-scanningSource Repository
More Security Claude Code Skills
Azure Compliancemicrosoft/azure-skills
Audit Azure compliance and Key Vault expiration with azqr scans
Firebase Security Rules Auditorfirebase/agent-skills
Find weak spots in Firestore rules and get clear fixes
Golang Securitysamber/cc-skills-golang
Find and fix security flaws in Go code using expert guidance and automated tools
Clerk Nextjs Patternsclerk/skills
Secure your Next.js app with Clerk middleware, server actions, and caching
Persona It Admingoogleworkspace/cli
Keep your digital workspace safe with IT admin security workflows
Two Factor Authentication Best Practicesbetter-auth/skills
Secure user logins with two-factor authentication using Better Auth
Gws Modelarmor Create Templategoogleworkspace/cli
Create new templates for Google Model Armor to protect AI apps from harmful content
Gws Modelarmor Sanitize Promptgoogleworkspace/cli
Clean user prompts safely with Google Model Armor templates