# detect-secrets mit Homebrew, Nix installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für detect-secrets in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:detect-secrets ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install detect-secrets ``` Evidenz: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#detect-secrets ``` Evidenz: nixpkgs package indexes: detect-secrets from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ## Paketfakten - **Paketschlüssel:** brew:detect-secrets - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 1.5.0 - **Quellzusammenfassung:** Enterprise friendly way of detecting and preventing secrets in code - **Homepage:** - **Repository:** - **Lizenz:** Apache-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-05-20T12:50:03Z - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - detect-secrets (cli) - detect-secrets-hook (cli) - detect-secrets (Alias) - detect-secrets-hook (Alias) ## Abhängigkeiten - certifi - libyaml - python@3.14 ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 1.5.0 - Manager aktualisiert: 2026-05-20 - lokale Daten: OK - Upstream-Repository: https://github.com/Yelp/detect-secrets - Info: No cached GitHub release or tag data was available. ## Projektgeschichte und Nutzung detect-secrets is Yelp's open-source command-line scanner for finding secrets in code and, more importantly, preventing newly introduced secrets from entering a repository. Its README describes the baseline workflow as a way to accept existing findings while blocking new ones. ### Projektgeschichte The GitHub repository was created in December 2017, and the README presents the tool as enterprise-friendly secret detection. Its changelog shows continued 1.x releases through 2024, including new detectors for GitLab, Telegram, PyPI, OpenAI, and IP addresses, plus support for newer Python versions. ### Adoptionsgeschichte detect-secrets was designed for large repositories where immediately removing every old secret-like value may be impractical. The baseline model helped it fit pre-commit hooks and CI workflows: teams generate .secrets.baseline, audit it, and then use detect-secrets-hook or scans to catch new findings. ### Wie es verwendet wird The standard package-manager workflow is to install the CLI, run detect-secrets scan into .secrets.baseline, and wire detect-secrets-hook into staged-file or tracked-file checks. The README also documents auditing the baseline and tuning detectors and filters for local policy. ### Warum Paket-Nerds sich dafür interessieren Package nerds care about detect-secrets because it is a practical DevSecOps CLI with a persistent config artifact rather than a one-shot grep-like scanner. It sits alongside pre-commit, GitHub secret scanning, trufflehog-style tools, and policy-driven CI checks. ### Zeitleiste - 2017: GitHub repository created for Yelp/detect-secrets. - 2020: 0.14.x releases continued the pre-1.0 series. - 2022: 1.2.0 added CI and release-pipeline work plus new token detectors. - 2024: 1.5.0 added OS-agnostic baseline support and more modern token detectors. ### Related projects - The project is commonly used with pre-commit-style hooks, CI pipelines, and other secret-scanning tools that enforce repository hygiene. ### Quellen - - - - ## Sicherheitshinweise Für detect-secrets wurde kein passendes lokales Secret-Handling-Manifest gefunden. Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat. ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .secrets.baseline ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** detect-secrets - **Version Scheme:** 0 - **Revision:** 9 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - Nix - detect-secrets: normalized package name match | nixpkgs package indexes: detect-secrets from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix ## Verwandte Links - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/de/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [python@3.14](https://pkg.so/de/brew/python-3-14/) - Runtime dependency declared by Homebrew. - [tartufo](https://pkg.so/de/brew/tartufo/) - Shares pkgdb curated category or tags: cli, pre-commit, secret-scanning, security. - [kingfisher](https://pkg.so/de/brew/kingfisher/) - Shares pkgdb curated category or tags: cli, secret-scanning, security. - [mantra](https://pkg.so/de/brew/mantra/) - Shares pkgdb curated category or tags: cli, secret-scanning, security. - [gitleaks](https://pkg.so/de/brew/gitleaks/) - Shares pkgdb curated category or tags: cli, devsecops, secret-scanning, security. - [git-hound](https://pkg.so/de/brew/git-hound/) - Shares pkgdb curated category or tags: cli, pre-commit, secret-scanning, security. - [talisman](https://pkg.so/de/brew/talisman/) - Shares pkgdb curated category or tags: cli, devsecops, pre-commit, security. - [ggshield](https://pkg.so/de/brew/ggshield/) - Shares pkgdb curated category or tags: cli, devsecops, security. - [git-secrets](https://pkg.so/de/brew/git-secrets/) - Shares pkgdb curated category or tags: cli, secret-scanning, security. - [cycode](https://pkg.so/de/brew/cycode/) - Both packages touch the same language runtime or ecosystem. Shared terms: certifi, cli, devsecops, libyaml, python. ## Combined YAML source View the package source record on GitHub. [combined/detect-secrets.yml](https://github.com/mxcl/pkgdb/blob/main/combined/detect-secrets.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph