v0.1.5policy-scout2026-06-10

Secret scanning with entropy and pattern detection

A dedicated scan engine combines Shannon-entropy string detection with a pattern library covering API keys, tokens, and credentials across major providers.

v0.1.52026-06-10
  • ·entropy.py flags strings above the entropy threshold for the file's language context
  • ·secret_patterns.yaml covers 30+ patterns: AWS, GCP, GitHub, Stripe, and generic token shapes
  • ·file_scanner.py and git_scanner.py integrate both detectors for filesystem and staged-content targets
  • ·guidance.py maps each finding type to a specific remediation action (rotate, revoke, add to .gitignore)