Products / VS Code extensions / Secrets-in-Output Scanner

Secrets-in-Output Scanner

Otherv0.1.1No ratings yetVS Code

Catches secrets an agent accidentally writes back out in commit messages and PR descriptions.

Install from Marketplace Open in VS CodeTalk to us
Quick installext install atulhritik.secrets-in-output-scanner

About Secrets-in-Output Scanner

Catches secrets an agent accidentally writes back out in commit messages and PR descriptions.

Price: $9/seat-mo

Included free

  • Commit-message secret scanning with inline warning banner
  • One-click [REDACTED] redaction in the commit-message box

Unlocked with a license

  • PR-description field scanning
  • Terminal scrollback scanning (Shell Integration API, best-effort)

Getting a license

Open the Secrets-in-Output Scanner sidebar (activity bar icon) and click Get License. After purchase you'll receive a license key — paste it into the sidebar and click Activate License. Keys are machine-locked; use Move to another machine… in the sidebar before reinstalling on a new device.

Settings

  • secretsInOutputScanner.includeEntropyHeuristic (licensed only, default false): also flags generic high-entropy strings in addition to known secret formats.

Roadmap (not implemented yet)

  • Keychain/secret-manager fingerprint matching: planned as an unimplemented v3 feature to cut false positives against values already tracked in a user's secret manager.

More extensions

All extensions →
VS Code extensionOther

PerfMaster

Monitors extension resource use, analyses startup, tracks memory and offers a lean mode.

Details
VS Code extensionOther

RegexWorkshop Pro

Live regex testing, a visual token explainer, a pattern library and multi-flavor support.

Details
VS Code extensionOther

LocaleWizard

Detects hardcoded strings, extracts them to i18n, previews pseudo-localisation and reports coverage.

Details

Need a custom VS Code extension or developer tool?

We design and ship extensions, MCP servers and developer tooling.

Discuss your idea