Set Up Secret Scanning
- 2 repo stars
- Updated July 24, 2026
- cboone/agent-harness-plugins
Set up secret scanning with gitleaks and TruffleHog GitHub Actions workflows, plus optional gitleaks configuration.
About
Set-up-secret-scanning configures secret scanning with gitleaks and TruffleHog via GitHub Actions workflows, plus optional gitleaks configuration. It wires automated credential-leak detection into CI so secrets are caught before they ship. Aimed at teams hardening their repos against accidental secret exposure.
- gitleaks + TruffleHog
- GitHub Actions workflows
- Optional gitleaks config
- Secret detection
Set Up Secret Scanning by the numbers
- Data as of Jul 25, 2026 (Skillselion catalog sync)
/plugin marketplace add cboone/agent-harness-plugins/plugin install set-up-secret-scanning@agent-harness-pluginsAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| repo stars | ★ 2 |
|---|---|
| Last updated | July 24, 2026 |
| Repository | cboone/agent-harness-plugins ↗ |
What it does
Set up secret scanning with gitleaks and TruffleHog GitHub Actions workflows, plus optional gitleaks configuration.
README.md
Set-Up Secret Scanning
Set up secret scanning in a repository with gitleaks and TruffleHog GitHub Actions workflows and optional gitleaks configuration.
Type: Skill
Trigger: /set-up-secret-scanning
Installation
See the marketplace install instructions.
What It Does
Sets up complementary secret scanning with two tools: gitleaks for fast pattern matching, and TruffleHog for deeper verification-based scanning that confirms whether detected credentials are still live. Both run on pushes to main, on every pull request, and on manual workflow_dispatch. Lets you choose both tools (recommended), gitleaks only, or TruffleHog only. For gitleaks, optionally creates a starter .gitleaks.toml.
Usage
/set-up-secret-scanning
Examples
- "set up secret scanning": generates workflow(s) and optional config
- "add secret scanning": same behavior
- "set up gitleaks and TruffleHog": same behavior
- "add trufflehog": same behavior
See Also
- Scaffold New Repo: scaffold a full repo (then add secret scanning)
- Handle Secrets: best practices for handling secrets in CLI tools
- All plugins
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85