Dependencies and secrets
1 tool. Feed: /tasks/dependencies-secrets/feed.xml
| Tool | Runs and needsWhere the tool runs and what must be in place before it works. | Sends data toOutside parties the tool contacts, read from the code and the documentation. Other connections are not ruled out. | Can change thingsWhether the tool's functions only read, or also create, change or delete things, run commands, or send data out. | How to run itThe run advice where we have read the tool under the verdict rule, else what the code shows; below it, whether it has run in our lab. |
|---|---|---|---|---|
| GitGuardian MCP ServerDraft · awaiting review MCP server that brings GitGuardian secret detection, incident triage and honeytokens into an AI agent. MCP server · GitGuardian, pushed 2026-10-14 | At the vendor Works with: Any MCP client, Cursor Needs: A GitGuardian workspace (US or EU SaaS, or self-hosted) where a personal access token can be created in the dashboard; The code defines scan, incidents:read and sources:read as MINIMAL_SCOPES; +6 more | GitGuardian API, GitGuardian /multiscan, mcp.gitguardian.com, Sentry, GitGuardian dashboard login, github.com/GitGuardian/ggmcp | changes, runs commands, sends data out | Code shows: can tunnel or exfiltrate · writes outside the project · reads broad tokens or the environment · +2 more Ran once, 2026-11-07: did no more than it said |