{
  "schemaVersion": "1.0",
  "slug": "detect-secrets",
  "title": "detect-secrets",
  "kind": "hook",
  "summary": "Yelp's secret-detection tool for baselined repository scans.",
  "sourceUrl": "https://github.com/Yelp/detect-secrets",
  "agentAccess": "approved",
  "license": {
    "spdx": "Apache-2.0",
    "allowsClosedSourceUse": true,
    "requiresNotice": true,
    "noLicenseFee": true
  },
  "install": {
    "steps": [
      "Inspect the hook command and arguments.",
      "Run it locally on sample changes.",
      "Enable it only after expected false positives are understood."
    ]
  },
  "outputs": [
    "hook result",
    "scan finding",
    "blocked-change reason"
  ],
  "usage": {
    "whyUse": "Use it when a project needs secret scanning with reviewable baselines and the team wants inspectable provenance before adoption.",
    "whenToUse": [
      "You need secret scanning with reviewable baselines.",
      "The upstream README and license fit the target project.",
      "You can test the integration on non-production data first."
    ],
    "whenNotToUse": [
      "The hook would run unreviewed shell commands.",
      "Blocking behavior would stop unrelated developer work."
    ],
    "safetyNotes": [
      "Keep required license notices when redistributing copied source or bundled code.",
      "Use dry-run or warn mode first.",
      "Keep bypass and rollback steps documented."
    ]
  },
  "repository": {
    "owner": "Yelp",
    "name": "detect-secrets",
    "stars": 4575,
    "defaultBranch": "master"
  },
  "lifecycle": {
    "githubUpdatedAt": "2026-06-27T04:14:48Z",
    "githubPushedAt": "2026-04-02T17:10:40Z",
    "lastVerifiedAt": "2026-06-27T00:00:00.000Z"
  }
}