HashiCorp Vault Secret Scanner

Scans codebases for hardcoded secrets using HashiCorp Vault SDK and truffleHog patterns. Integrates with Vault Transit engine for automatic secret rotation and re-encryption of detected credentials.

Installation

Use the upstream install or setup path that matches your environment:

• $ make bootstrap
• To compile a development version of Vault, run make or make dev. This will
• $ make dev
• To compile a development version of Vault with the UI, run make static-dist dev-ui. This will

Requirements and caveats from upstream:

• A modern system requires access to a multitude of secrets: database credentials, API keys for external services, credentials for service-oriented architecture communication, etc. Understanding who is accessing what se...
• To run tests, type make test. Note: this requires Docker to be installed. If

Basic usage or getting-started notes:

• systems, such as AWS or SQL databases. For example, when an application

• can revoke not only single secrets, but a tree of secrets, for example,

• Documentation, Getting Started, and Certification Exams

• Source: https://github.com/hashicorp/vault

• Extracted from upstream docs: https://raw.githubusercontent.com/hashicorp/vault/HEAD/README.md

Source

• Agent Skill Exchange