no-secrets

Uses cryptographic entropy to identify high-entropy strings like secrets, catching patterns that regex alone might miss, as highlighted in the README's examples.

Leverages ESLint's Abstract Syntax Tree for precise analysis within code structures, reducing false positives in complex code such as string templates or comments.

Offers customizable options like tolerance, ignore lists, and additional regex patterns, allowing teams to tailor detection to their specific needs, as shown in the configuration examples.

Works with JSON files when paired with plugins like eslint-plugin-jsonc, extending secret scanning to configuration files, though this requires additional setup.