Source
Open the upstream repository and check maintainers, README scope, examples, and recent activity.
hook
Agent readydetect-secrets
Review before use
Yelp's secret-detection tool for baselined repository scans. GitHub metadata was checked on 2026-06-27; the listed license is no-fee and permissive for review, evaluation, and responsible reuse.
Source review
License
Confirm Apache-2.0 terms fit your project and retain notices when required.
Install behavior
Read commands before running them and start with a low-risk local workspace.
Verification
Check outputs, safety notes, and policy fit before exposing the resource to agent workflows.
Why use it
Use it when a project needs secret scanning with reviewable baselines and the team wants inspectable provenance before adoption.
When to use
- You need secret scanning with reviewable baselines.
- The upstream README and license fit the target project.
- You can test the integration on non-production data first.
When not to use
- The hook would run unreviewed shell commands.
- Blocking behavior would stop unrelated developer work.
Agent manifest preview
Use the manifest as structured review context before applying local policy.
{
"schemaVersion": "1.0",
"slug": "detect-secrets",
"title": "detect-secrets",
"kind": "hook",
"summary": "Yelp's secret-detection tool for baselined repository scans.",
"sourceUrl": "https://github.com/Yelp/detect-secrets",
"agentAccess": "approved",
"license": {
"spdx": "Apache-2.0",
"allowsClosedSourceUse": true,
"requiresNotice": true,
"noLicenseFee": true
},
"install": {
"steps": [
"Inspect the hook command and arguments.",
"Run it locally on sample changes.",
"Enable it only after expected false positives are understood."
]
},
"outputs": [
"hook result",
"scan finding",
"blocked-change reason"
],
"usage": {
"whyUse": "Use it when a project needs secret scanning with reviewable baselines and the team wants inspectable provenance before adoption.",
"whenToUse": [
"You need secret scanning with reviewable baselines.",
"The upstream README and license fit the target project.",
"You can test the integration on non-production data first."
],
"whenNotToUse": [
"The hook would run unreviewed shell commands.",
"Blocking behavior would stop unrelated developer work."
],
"safetyNotes": [
"Keep required license notices when redistributing copied source or bundled code.",
"Use dry-run or warn mode first.",
"Keep bypass and rollback steps documented."
]
},
"repository": {
"owner": "Yelp",
"name": "detect-secrets",
"stars": 4575,
"defaultBranch": "master"
},
"lifecycle": {
"githubUpdatedAt": "2026-06-27T04:14:48Z",
"githubPushedAt": "2026-04-02T17:10:40Z",
"lastVerifiedAt": "2026-06-27T00:00:00.000Z"
}
}