Skip to content
SpanForge / SDK Service / Build phase

sf_secrets

Pattern and entropy-based secret scanning with 20 detection patterns, SARIF 2.1.0 output, HashiCorp Vault migration hints, and pre-commit hook integration.

from spanforge import sf_secrets
What it covers
  • 20 detection patterns across platforms
  • Shannon entropy scoring for unrecognised secrets
  • SARIF 2.1.0 structured output
  • HashiCorp Vault migration hints
  • Auto-block policy enforcement table
  • Pre-commit hook for local enforcement
Get started

Install once. Import per service.

All SDK services ship inside a single package. Install spanforge once and import only what you need.