🛡️ API Guard SEC

Production-grade CLI tool, Git Pre-Commit Security Shield, and Secret Leak Prevention engine for Node.js, React, and Full-Stack codebases.

Prevent catastrophic API key leaks, auto-harden .gitignore, extract secrets to .env, and block unsafe Git commits before code leaves your local machine!

🔥 Real-World Problems Solved

Accidental Hardcoded Secrets: Detects 50+ secret key formats (OpenAI, AWS, Stripe, MongoDB, Postgres, GitHub PATs, JWT secrets, Private Keys).
Exposed .env Files: Automatically inspects .gitignore and appends missing rules (.env, .env.local, .env.*, *.pem, *.key).
Automated Refactoring: Extracts string secrets from code and replaces them with process.env.KEY or import.meta.env.VITE_KEY while creating .env and .env.example.
Git Pre-Commit Shield: Blocks git commit if .env is staged or hardcoded secrets are present in staged diffs.

🚀 Quick Start & Installation

Install globally or run on any project with npx:

# Run secret scan on current project
npx api-guard-sec scan

# Auto-harden .gitignore, extract secrets to .env, and install Git Pre-Commit Shield
npx api-guard-sec fix

# Install Git pre-commit hook only
npx api-guard-sec install-hook

🛠️ CLI Commands

Command	Description
`npx api-guard-sec scan`	Scans all project files for 50+ secret regex patterns and high entropy strings.
`npx api-guard-sec scan --staged`	Scans only Git staged changes (used by pre-commit hook).
`npx api-guard-sec fix`	Auto-hardens `.gitignore`, untracks cached `.env`, refactors secrets, and installs Git hook.
`npx api-guard-sec install-hook`	Installs `.git/hooks/pre-commit` security script.

API Guard SEC — Real-Time Secret & Exploit Shield

Sumit Chaudhary

🛡️ API Guard SEC

🔥 Real-World Problems Solved

🚀 Quick Start & Installation

🛠️ CLI Commands

📄 License