residoo

Find secrets your AI coding agent leaked to disk, watch for new ones, and optionally block a sensitive read before it happens. Free, MIT, zero deps, no network calls by default. Outscores 7 other tools on our own published benchmark; GitGuardian's ggshield couldn't be scored at all, since it refuses to run without a server account.

GitHub

Official source

Start locally with the CLI guide