Roadmap

Shipped so far: the Go core with built-in detection rules, native/Husky hook installation, .secretcheckrc.json / .secretcheckignore configuration, and distribution across Go, npm, and PyPI from one binary (see Architecture). Still planned:

• Git history scanning — a mode that walks past commits, not just staged files, for onboarding an existing repo.
• Entropy-based detection — catch high-entropy strings that don't match a known pattern, as an opt-in supplementary rule.
• A CI-friendly GitHub Action — wrap secretcheck scan --all --no-prompt as a first-class Action instead of a manual npx/binary-download step.
• More built-in rules — expanding provider coverage as new token formats come up; see Detection rules for the current list.

Have a use case or request? Open an issue on GitHub.