Scan a build log for exposed credentials

Detect likely GitHub tokens, AWS keys, bearer credentials, JWTs, private-key blocks, database URLs, API keys, passwords, and secret assignments in a CI log. Return only types, counts, line numbers, and redacted snippets—never the detected values.

$0.002 USDC   POST /v1/secret-scan

developer-tools · security · secrets · ci-cd

{
  "log": "FAILED tests/test_math.py::test_total - AssertionError: assert 1 == 2",
  "step_name": "pytest"
}

{
  "success": true,
  "finding_count": 1,
  "types": {
    "bearer_token": 1
  },
  "findings": [
    {
      "line": 4,
      "type": "bearer_token",
      "redacted": "Authorization: Bearer [REDACTED]"
    }
  ]
}