#secrets

MergeLock Code Scanner

teskilatsiz

Local-first security scanner for changed-lines-first developer workflows.

Dotenv Drift — find the gap between your code and your .env

sujeito-operator

Finds env vars your code reads but .env never defines, keys you define but never use, duplicate keys, and .env files that are not gitignored.

VaultPulse

evolve-data

Read-only Azure Key Vault secrets viewer for VS Code — multi-vault, multi-tenant

LocalMask

localmask

Mask secrets & PII before any AI sees your code — 100% local. Key toggle real/masked view, in-editor review, teach-by-marking, masked mirror publish.

Repo Health

antoniaadelina

A dashboard for repo hygiene: commit message quality, README drift, stale TODOs, possible leaked secrets, and an onboarding checklist.

LeakSnitch IDE

LeakSnitch

Detects and redacts sensitive data (API keys, passwords, tokens) before you commit or paste into AI tools.

Keyhound — Secret & Auth Safety

keyhound

Warns you the instant a weak JWT secret, hardcoded API key, private key, or unsafe TLS setting sneaks into your code — because nothing else does.

VibinGuard

vibinguard

Local security guard for AI-generated code before it reaches your workspace.

SecurStack

SecurStackio

Run SecurStack security scans from VS Code.

CipherNest

CipherNestSecure

AI-aware security scanner for VS Code — code vulnerabilities, LLM risks, secrets, dependencies, MCP & agent security

DeployShield

vetrisuriya

Deployment safety assistant — prevent accidental commits of secrets, debug code, and insecure configurations

EnvLock

codestreak

Smart .env file manager for teams — track missing keys, prevent secret leaks, sync across environments