SpanForge / SDK Service / Build phase
sf_secrets
Pattern and entropy-based secret scanning with 20 detection patterns, SARIF 2.1.0 output, HashiCorp Vault migration hints, and pre-commit hook integration.
from spanforge import sf_secretsWhat it covers
- 20 detection patterns across platforms
- Shannon entropy scoring for unrecognised secrets
- SARIF 2.1.0 structured output
- HashiCorp Vault migration hints
- Auto-block policy enforcement table
- Pre-commit hook for local enforcement
Get started
Install once. Import per service.
All SDK services ship inside a single package. Install spanforge once and import only what you need.
Install
pip install spanforgeImport
from spanforge import sf_secrets