secret-commit-guard
Asks before a git commit that would record a credential or a secret-named file. Reads the staged diff with git.
Pacote de plugins · de baselane-sh · não está mais listado
Resumo
secret-commit-guard é um pacote de plugins para ferramentas de programação com IA publicado por baselane-sh. Nenhum marketplace que lemos o lista mais; a última listagem saiu em 2026-10-22. A última mudança que registramos foi em 2026-10-22. Conforme nossa passagem pelos marketplaces em 2026-10-21.
O que pede
- Instala-se como pacote de plugins
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Conectar
Sem dados para um comando automático: o que os marketplaces declaram não diz de forma inequívoca como conectá-lo.
Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Marketplace da comunidade baselane-sh/mods-catalog (Abrir o código no GitHub) | Removido em 2026-10-22 | 0.5.1 | Forks (GitHub): 0 Estrelas (GitHub): 1 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
O que mudou
- Não está mais listado em Community GitHub marketplaces
- Community GitHub marketplaces: removido
- Passou a ser um produto que acompanhamos
- Community GitHub marketplaces: apareceu
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
Blocks commits that carry absolute paths from this machine, git add -A / git add ., and pushes straight to main or master.
-
Block destructive git and filesystem commands before execution
-
Keeps private infrastructure details out of public repositories. Ships the privacy-guard skill: session rules for what must never cross the public boundary, plus a per-repo…
-
Smart git commits with security and quality review
-
PreToolUse and PostToolUse hooks that catch secrets leakage patterns: echoing env vars, reading secret files, tokens in URLs, and missing gitignore/permissions on sensitive files.
-
Smart git commits using conventional commit format
-
Holds risky Bash commands and shows what they would change before they run.
-
Refuses force-pushes, pushes to protected branches, git commands that skip hooks and kills by process name; optionally bans folders, keeps subagents out of shared checkouts and…
-
Scan and remove sensitive data (secrets, API keys, private domains/IPs, PII) from GitHub repository history. Use this skill whenever the user says scan sensitive data, clean git…
-
Setup git hooks for pre-commit, pre-push automation
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Block destructive git and filesystem commands before execution
-
PreToolUse hooks for Claude Code that deny dangerous shell, git, and credential commands before they run: `rm -rf /` shapes, `git push --force`, `python -c` / `node -e` eval…
-
Scan Git commits for security vulnerabilities using Almanax directly from Claude Code. The plugin connects to the Almanax MCP server to analyze commit diffs, surface findings by…
-
Create a git commit, automatically generate commit messages based on [Google Engineering Practices - CL…
-
Scan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against .env.example, and rotate secrets. Keeps…
Listado em Claude Code: claude-plugins-official (5)
-
Commands for git commit workflows including commit, push, and PR creation
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
-
Aikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
-
AI code review agent for GitHub and GitLab. View and resolve Greptile's PR review comments, run reviews on your working branch, and search your organization's knowledge base and…
Listado em Claude: knowledge-work-plugins (5)
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
gk-cli com.gitkraken/gk-cli
The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
-
Bring Qodo's codebase intelligence, coding standards, and code review into your coding agent.
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
Listado em Codex: openai-curated (openai/plugins) (5)
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
Codex Security workflows for security scans, analysis, and investigation.
-
Inspect recent issues and events in Sentry from Codex.
-
AI-powered code review in Codex, powered by CodeRabbit.
-
Qodo setup, code intelligence, and review workflows.
Listado em Community GitHub marketplaces (5)
-
Blocks commits that carry absolute paths from this machine, git add -A / git add ., and pushes straight to main or master.
-
Keeps private infrastructure details out of public repositories. Ships the privacy-guard skill: session rules for what must never cross the public boundary, plus a per-repo…
-
Smart git commits with security and quality review
-
PreToolUse and PostToolUse hooks that catch secrets leakage patterns: echoing env vars, reading secret files, tokens in URLs, and missing gitignore/permissions on sensitive files.
-
Smart git commits using conventional commit format
Listado em Copilot CLI: github/awesome-copilot (5)
-
Reconstruct your dev context (branch, commits, uncommitted work, PR clues) and trigger a resume prompt to continue quickly.
-
Visualize the active Git repository through worktrees, branches, commits, and optional GitHub pull request context.
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
Navigate pull requests and securely explore GitHub Actions artifacts, including test results, static sites, terminal recordings, and source files.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
-
code-apps-preview
Build and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
Listado em Cursor: cursor/plugins (5)
-
Manage repos, issues, pull requests, and Actions.
-
Internal team workflows for CI, code review, shipping, local automation, and verification.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Scaffold and validate new agent plugins.
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Listado em Docker MCP Catalog (5)
-
Git repository interaction and automation.
-
Tools for interacting with Git repositories.
-
MCP server for using Semgrep to scan code for security vulnerabilities.
-
Tools for interacting with the GitHub API, enabling file operations, repository management, search functionality, and more.
-
Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
Listado em Official MCP Registry (5)
-
Read-only context and complete checks against patterns learned from git history. Local; no LLM.
-
Scan text and git diffs for committed credentials using real vendor key formats plus entropy.
-
secretguard-mcp io.github.vladimirbakalov/secretguard-mcp
Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.
-
speclock io.github.sgroy10/speclock
AI Constraint Engine — enforces CLAUDE.md and .cursorrules as laws. 51 MCP tools.
-
Git-native decision memory for coding agents: only the decisions still in force for the edited path
Listado em npm registry (MCP servers) (5)
-
Detect hardcoded secrets in source and config. Reports masked previews, never the values.
-
Compare dotenv files and report which keys are missing or extra, by name only.
-
pushci io.github.finsavvyai/pushci
AI-native zero-config CI/CD. 19 languages, 40+ frameworks. Free forever.
-
Monitor GitHub repo health, DORA metrics and CI signals from your AI assistant.
-
Octocode MCP - AI Context Platform
AI code research platform. Search, analyze, and extract insights from any GitHub repository.
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Quer esta marca no seu plugin em nosso catálogo?
Prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS, e você poderá mostrar esta marca na ficha, com banners ao vivo para o seu site e o README. Como funciona a verificação
Você também recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Community GitHub marketplaces. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.