dart_secrets_scanner 2.1.0
dart_secrets_scanner: ^2.1.0 copied to clipboard
command-line tool designed to scan Dart and related files in Flutter projects for hardcoded sensitive information such as API keys, tokens, passwords, and other credentials.
2.1.0 #
- Added native Android and iOS source/configuration scanning while retaining focused exclusions for generated build artifacts.
- Expanded provider and generic detection for modern GitHub, AWS, Stripe, Slack, OpenAI, Anthropic, private-key, bearer-token, and database credential formats.
- Added
--root,--config,--format,--help, and--versionCLI options, including machine-readable JSON output and explicit usage/error exit codes. - Added dartdoc for the public API and a runnable package example.
- Consolidated validation into one CI workflow and adopted pub.dev's official OIDC publishing workflow.
2.0.2 #
- Redacted detected secret values from scanner output so they cannot leak into terminal or CI logs.
- Reported every finding before returning a non-zero exit code.
- Added regression coverage for redacted output and multi-finding CLI behavior.
2.0.1 #
- Fixed CLI compilation/analyzer failure by adding the missing
dart:ioimport forexit(1). - Fixed CI workflow validation by removing
secretsusage from the job-levelifexpression and gating publish steps with a token check step.
2.0.0 #
- Rebuilt the scanner around MASVS-aligned regex and contextual heuristics so config files and secrets get broader coverage.
- Added
dart_secrets_scanner.yamlconfiguration support, an example file, and regression tests for custom keywords/exclusions. - Introduced a GitHub Actions workflow that runs
dart analyze,dart test, and prepares/publishes releases when av*tag is pushed.
1.0.6 #
- Improved checking rules
- Added topics to package
1.0.5 #
- Added more supported file formats
1.0.4 #
- Added emoji to report
- Improved patterns
1.0.3 #
- Added async
- Improved patterns
- Added datadoc
1.0.0 #
- Initial version.