Download the PHP package laravelsecurityaudit/laravel-secret-scanner without Composer
On this page you can find all versions of the php package laravelsecurityaudit/laravel-secret-scanner. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download laravelsecurityaudit/laravel-secret-scanner
More information about laravelsecurityaudit/laravel-secret-scanner
Files in laravelsecurityaudit/laravel-secret-scanner
Package laravel-secret-scanner
Short Description Framework-agnostic secret and PII detection engine: rules, scanner, redactor, severity and confidence model. Shared core for the Laravel Security Audit guard packages.
License MIT
Homepage https://github.com/laravelsecurityaudit/laravel-secret-scanner
Informations about the package laravel-secret-scanner
Laravel Secret Scanner
The shared detection engine behind the Laravel Security Audit guard packages. Framework-agnostic: rules, a scanner, a redactor, and a severity and confidence model, with zero Laravel dependency.
It is the core that laravel-mail-guard (outgoing mail) and laravel-ai-egress-guard (outbound AI traffic) both build on. One engine, every channel.
This is an independent open-source package. It is not affiliated with, endorsed by, or sponsored by Laravel or Laravel LLC.
Requirements
- PHP 8.2+
Installation
Concept
A channel implements ScanContext to expose the text to scan. A Rule inspects that context and yields immutable Findings. The Scanner runs a set of rules, isolates a broken rule so it can never stop a scan, and computes a risk level. The Redactor masks critical, high-confidence matches in a copy of the content. GuardDecision answers whether a set of findings is severe and confident enough to block.
Bundled rules
| Rule id | Severity | Confidence |
|---|---|---|
secrets.private_key |
critical | high |
secrets.stripe_key |
critical | high |
pii.credit_card |
critical | high |
Add your own by implementing LaravelSecurityAudit\SecretScanner\Scanning\Contracts\Rule.
Testing
The Laravel Security Audit family
One detection engine, guarding every place data leaves your app.
| Package | What it guards |
|---|---|
| laravel-secret-scanner (this package) | Shared secret and PII detection engine (the core) |
| laravel-mail-guard | Outgoing Laravel mail |
| laravel-ai-egress-guard | Outbound AI provider traffic (OpenAI, Anthropic, Gemini) |
| laravel-ai-lint | Static analysis: leaked AI keys and unsafe AI wiring |
| laravel-ai-circuit-breaker | Runaway AI loops and spend |
| laravel-ai-ledger | GDPR Article 30 processing ledger for AI traffic |
License
The MIT License (MIT). See LICENSE.