Secrets Scanner and Rotator

Prevent secret leaks and manage credential rotation.

When to Use

• Pre-commit security checks
• After a potential secret leak
• Setting up secret management

Instructions

1. Scan codebase for hardcoded secrets
2. Check git history for leaked credentials
3. Set up secret management (Vault, AWS Secrets Manager)
4. Implement environment variable patterns
5. Add pre-commit hooks for secret detection
6. Guide credential rotation process
7. Set up automated secret scanning in CI