Hacker News Reader

There are several tools which can be used with pre-commit, for example trufflehog.

I use one a git pre-commit hook that according to my notes i copied from here (at some point in the past, it may have changed since then):

Then adapted with a better regex for secret keys I got from here: https://github.com/awslabs/git-secrets/blob/80230afa8c8bdeac...

(I think maybe I was getting false positives before)

The excellent pre-commit framework (https://pre-commit.com/) has a hook for that in its official hook collection: https://github.com/pre-commit/pre-commit-hooks#detect-aws-cr...

GitHub has some protections that you can enable to help prevent this.

Note: paid add-on, and I believe it requires an enterprise subscription to start with.

There exists some open source tooling in the same space.

I've used sync-secrets before, which has worked well- https://github.com/Yelp/detect-secrets