GitPurge: Real-Time Secret leak prevention

🛡️ Real-time secret detection for VS Code

GitPurge helps developers detect and intercept accidentally committed API keys, tokens, and secrets in real-time as you write.

✨ Key Features

• ⚡ Real-Time Secret Detection: Instantly catches leaked API keys, access tokens, and credentials in the editor before they ever touch git.
• 🧠 Shannon Entropy & Pattern Matching: Employs mathematical entropy analysis alongside strict regular expressions to detect high-entropy secrets and minimize false positives.
• 🔒 100% Local & Private: Scans execute completely on your machine—no code snippets, file names, or tokens are ever sent to remote servers.

⚡ Quickstart

VS Code Extension

Install GitPurge from the VS Code Extensions Marketplace, or launch the command palette (Ctrl+Shift+P / Cmd+Shift+P) and use:

Configuration

Add exclusions or adjust limits in your VS Code settings.json:

{
  "gitpurge.exclude": [
    "**/.git/**",
    "**/node_modules/**",
    "**/.venv/**",
    "**/dist/**"
  ],
  "gitpurge.maxFileSize": 1048576
}

Pre-commit Integration

Prevent secrets from reaching your Git history automatically by adding GitPurge to .pre-commit-config.yaml:

repos:
  - repo: local
    hooks:
      - id: gitpurge
        name: GitPurge Secret Check
        entry: python3 -m gitpurge
        language: system
        pass_filenames: true

# Install dependencies
npm install

# Run test suite
npm test

# Install dependencies
uv sync          # or: pip install -e .

# Run test suite
pytest

GitPurge/
├── src/
│   ├── extension.ts       # VS Code extension entry point & TreeDataProvider
│   ├── gitignore.ts       # .gitignore matching utility
│   ├── scanner.ts         # TypeScript secret scanner & entropy engine
│   └── gitpurge/          # Python engine
│       ├── detectors.py   # Regex secret rules & patterns
│       ├── entropy.py     # Shannon entropy analysis
│       ├── models.py      # Dataclasses (Finding, ScanResult, GitStatus)
│       ├── scanner.py     # Python core scanner orchestration
│       └── server.py      # Request handler and CLI entry point
├── test/                  # Test suites and fixtures
├── package.json           # Extension manifest & scripts
├── pyproject.toml         # Python project configuration
└── tsconfig.json          # TypeScript compiler configuration

🔒 Privacy & Local Execution

GitPurge processes all code 100% locally. No code snippets, file names, tokens, or diagnostics are ever transmitted to external APIs or remote tracking services.