Picket Secret Scanner

Version updated for https://github.com/willibrandon/picket to version v0.2.12.

  • This action is used across all versions by 2 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

Picket is a MIT-licensed tool for scanning secrets in .NET projects, providing a Gitleaks-compatible command surface, Native AOT release binaries, and dotnet tool packages. It automates the process of identifying sensitive information such as API keys, passwords, and other credentials by scanning Git changes, Hugging Face resources, and GitLab project data. The action can be integrated into CI pipelines and used to ensure code safety during development.

What’s Changed

Release artifacts include SHA-256 checksums, package-size metadata, and GitHub artifact attestations.