LeakSnitch for VS Code

Detect and redact sensitive data (API keys, passwords, tokens, database URIs) directly in your editor — before you commit, paste into AI tools, or share your screen.

Features

Real-time detection — Scans files as you type using 55+ regex patterns, entropy analysis, and checksum validation
Inline annotations — Secrets are highlighted with squiggly underlines (red = high severity, yellow = medium, blue = low)
One-click redact — Right-click → "LeakSnitch: Redact Secret" replaces the line with block characters
Dashboard sync — Detections sync to your LeakSnitch dashboard alongside browser detections
Enterprise policies — Org-level redact mode, whitelist domains, and custom patterns apply automatically

Getting Started

Install the extension from the VS Code Marketplace
Sign in via the command palette (Cmd+Shift+P → LeakSnitch: Login)
Paste your User ID from leaksnitch.com/dashboard/settings
Open any file — secrets are detected instantly

Commands

Command	Description
`LeakSnitch: Login`	Sign in with your LeakSnitch account
`LeakSnitch: Logout`	Disconnect from LeakSnitch
`LeakSnitch: Scan Current File`	Manually trigger a scan
`LeakSnitch: Redact Secret`	Redact the current line
`LeakSnitch: Open Dashboard`	Open your LeakSnitch dashboard

Requirements

A LeakSnitch account (free tier available)
Node.js 18+ (bundled with VS Code)

Extension Settings

This extension contributes the following settings:

leaksnitch.enabled: Enable/disable detection (default: true)
leaksnitch.patternsUrl: URL for detection patterns (default: https://api.leaksnitch.com/patterns)

Data & Privacy

All detection runs locally in your editor — no code is sent to external servers
Only detection metadata (rule matched, file path) is synced to your dashboard
Raw secret values are never transmitted or stored

LeakSnitch