secrets-scanner

3 events · 4 hooks

From secrets-scanner

Risk Indicators

Executes bash commands

Source

Defined in hooks/hooks.json

Configuration

{
  "PreToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/secrets_scanner_hook.py --mode=pre --client=claude_code"
        }
      ],
      "matcher": "Read|read"
    }
  ],
  "PostToolUse": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/secrets_scanner_hook.py --mode=post --client=claude_code"
        }
      ],
      "matcher": "Read|read"
    },
    {
      "hooks": [
        {
          "type": "command",
          "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/secrets_scanner_hook.py --mode=post --client=claude_code"
        }
      ],
      "matcher": "Bash|bash"
    }
  ],
  "UserPromptSubmit": [
    {
      "hooks": [
        {
          "type": "command",
          "command": "python3 ${CLAUDE_PLUGIN_ROOT}/hooks/secrets_scanner_hook.py --mode=pre --client=claude_code"
        }
      ]
    }
  ]
}

Summary

{
  "riskFlags": {
    "touchesBash": true,
    "matchAllTools": false,
    "touchesFileWrites": false
  },
  "typeStats": {
    "command": 4
  },
  "eventStats": {
    "PreToolUse": 1,
    "PostToolUse": 2,
    "UserPromptSubmit": 1
  },
  "originCounts": {
    "absolutePaths": 0,
    "pluginScripts": 4,
    "projectScripts": 0
  },
  "timeoutStats": {
    "commandsWithoutTimeout": 4
  }
}