CLI command
probierz secret-scan
Scan an artifact directory for secrets before protected storage or publication.
Invocation#
probierz secret-scan [DIRECTORY]Required inputs and options#
- `<directory>` is required and must be readable by the scanner.
Output and state effects#
Writes the scan result as JSON. A non-passing scan sets exit code 1 and does not remove or redact source files.
Exact refusals#
- Missing directory: `secret-scan needs a directory`.
- Unreadable input and scanner errors propagate; findings are never converted into a passing scan.
Source snapshot#
Generated from the Rust binaries at https://github.com/wisent-ai/probierz.git revision `c589d6917201c31f57e6a7f24522c0d50ae5bd0f`.
Combined help SHA-256: `43f0d9cd136ac2c46ec3eedb2824bd5d6168f235dea4caaa50610c005f40c84a`; binary SHA-256: `7e42c843082863ed265817de90a110a2f27546426a54d372e10009fd665a4d8e`.