Real-time inline secret, credentials, and PII leak detection powered by the RevokeNot CLI engine.
Protect your repositories from accidental leaks of sensitive credentials, API keys, passwords, and Personally Identifiable Information (PII) before they ever reach your version control history.
Key Features
Real-Time Detection: Scans files as you type (debounced) and immediately highlights leaks directly in the editor using warning diagnostics.
Hybrid Detection Engine: Uses structured regex pattern matching combined with Shannon Entropy scanning to find high-randomness credentials that standard patterns miss.
AI Validation Layer: Leverages LLMs (via Groq/Gemini Flash) to analyze the context of flagged secrets, reducing false positives and verifying real vs. dummy credentials.
Automated Virtual Environment Detection: Detects your project's local virtualenv (.venv or venv) automatically to locate the underlying scanner CLI without manual configuration.
Explainable Risk Reasoning: Hover over any highlighted leak in your code to view the AI's reason, confidence rating, and details about the vulnerability.
Installation & Setup
Install the CLI Engine:
Ensure the CLI is installed in your python environment (globally or inside a local .venv):
pip install -e .
Launch the Extension:
Open a workspace or folder in VS Code. The extension will automatically activate.
Configure Settings:
revokenot.scanOnSave: Scan files immediately on save (default: true).
revokenot.scanOnType: Debounce-scan files while typing (default: true).
revokenot.enableAi: Toggle the AI validation layer.
Commands
Access the Command Palette (Ctrl+Shift+P or Cmd+Shift+P) and type:
RevokeNot: Scan Current File - Run an immediate security audit on the active document.
RevokeNot: Scan Workspace - Run a scan across the workspace folders.
