fnox scan

• Usage: fnox scan [FLAGS] [DIR]

Scan repository for potential secrets

Arguments

• [DIR] — Directory to scan (default: current directory)

  Default: .

Flags

• -i --ignore <IGNORE> — Skip files matching this glob pattern (can be used multiple times)

• --format <FORMAT> — Output format

  Choices: human, json

  Default: human

• -q --quiet — Show only files with potential secrets

• -h --help — Print help

Examples

Scan files for potential secrets using heuristics. Findings need review; a clean scan does not prove that files or git history contain no secrets.

fnox scan .
fnox scan . --format json
fnox scan . --ignore "vendor/**"

Related

• Plaintext defaults
• Global options, including profile selection and non-interactive mode.