SecretLint

SecretLint is a developer workflow tool that catches API keys, tokens, and credentials before they land in git history or CI logs. It runs as a lightweight pre-commit hook plus a CI gate, but the real value is centralized visibility: a web dashboard that shows where leaks are happening (repo, team, file type), how often, and whether they were remediated. It also generates precise fix guidance (rotate which key, where to revoke, how to replace with env vars or vault references) and opens PRs that remove secrets safely without breaking builds. This is not a full security platform; it focuses narrowly on secret sprawl and the messy operational steps after detection. It integrates with GitHub/GitLab/Bitbucket, Slack, and common secret managers so teams can actually resolve incidents instead of just getting noisy alerts.