checks:staged-sensitive
Scan staged files for common secret patterns before commit.
Syntax#
vigil checks:staged-sensitive [args]
Options#
| Flag | Description |
|---|
--json | Emit the versioned JSON envelope. |
--format | Select a machine or human output format. |
Examples#
vigil checks:staged-sensitive
vigil checks:staged-sensitive --json
Example Use Cases#
- Use this command when you need to scan staged files for common secret patterns before commit.
- Run it in local checks, scripts, or CI when read-only evidence is needed.
Technical Contract#
| Binding | builtin:checks:staged-sensitive |
|---|
| Stability | stable |
|---|
| Timeout | 2m0s |
|---|
| Required tools | None |
|---|
| Capabilities | filesystem:read, git:read, process |
|---|
| Output formats | text, json, jsonl, junit, sarif, github |
|---|