Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Secretlint

Free#20 of 24 in Secrets Scanning Software

Secretlint: A free, customizable secret scanner for JavaScript-oriented developer workflows. Ranked #20 of 24 in Secrets Scanning Software by our editors (7.3/10); pricing: Open source; best for javaScript-oriented linting workflows.

7.3/10Editor score
Visit Secretlint
Secretlint7.3 Visit Secretlint

At a glance

  • Editor score
    7.3 / 10
  • Pricing
    Open source
  • Best for
    JavaScript-oriented linting workflows
  • Paid from
    Free
  • CI/CD scanning
    Yes
  • Facts checked
    22 Sep 2026
Secretlint screenshot

  • Where it wins

    • Pre-commit and GitHub Actions integrations support developer workflows.
    • Custom and pluggable rules allow tailored secret detection.
    • JSON, SARIF, and GitHub annotation outputs support CI reporting.

  • Where it doesn't

    • Verified VCS coverage is limited to Git.
    • It does not provide dedicated push protection.
    • Configuration and rule selection require developer workflow setup.

Our verdict on Secretlint

Secretlint is an open-source, pluggable command-line tool for scanning project files for credentials and other exposed secret data. It is suited to JavaScript-oriented linting workflows and teams that want secret checks close to development, including pre-commit hooks, continuous-integration pipelines, and pull requests. The tool runs through Node.js, Docker, or downloadable single-executable binaries, and a Chrome extension can detect credentials in web requests and responses.

The project is distributed under the MIT license and has a free open-source plan rather than tiered paid editions. Its integrations include GitHub Actions, Husky, lint-staged, pre-commit, and Mega-Linter. GitHub Actions formatting can add pull-request annotations, while output options include JSON, SARIF, and GitHub annotations. Glob-based scanning, ignore-file support, secret masking, configurable rule packages, and custom rule creation give teams control over which files and patterns are checked.

Secretlint fits teams that prefer configurable linting within existing Git and GitHub Actions processes. Its category coverage is narrower for organizations seeking dedicated server-side protection: supported VCS coverage is Git, and push protection is not provided. Teams that need checks enforced at the repository hosting boundary, or coverage beyond Git, should choose a tool with those capabilities instead. For developer-led scanning before commits and CI reporting, Secretlint offers a focused open-source option with a customizable rule model.

Your product? Our editors can test Secretlint in depth and publish a review, labelled as paid · from $149/mo →

Secretlint pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on github.com

Secretlint fact sheet

Free planNot verified
Paid fromFree
Supported VCSGit
CI/CD scanningYes
Pre-commit scanningYes
Pull-request scanningYes
Push protectionYes
Custom detection rulesYes
Repository limitNot verified
DeploymentSelf-hosted
SupportDocs, Community
Built forSolo, Small business, Mid-market, Enterprise (editorial estimate)
Integrations7 integrations: Docker, npm, Husky, lint-staged, pre-commit, GitHub Actions …
PricingOpen source
Websitegithub.com
Facts checked22 Sep 2026

Secretlint integrations

Secretlint lists 7 integrations on its own site.

  • Docker
  • npm
  • Husky
  • lint-staged
  • pre-commit
  • GitHub Actions
  • Mega-Linter

Alternatives to Secretlint

See all Secretlint alternatives →

Used Secretlint? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Secretlint for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — Secretlint 7.3/10

Secretlint is listed in our Secrets Scanning Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/secretlint/"><img src="https://www.itechguides.com/best/badge/secretlint.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update