扫描每个 Git 提交以查找机密和注入漏洞
Scan every git commit for secrets and injection flaws
Claude Code 已完成，Claude。一个免费工具在每个提交上运行 11 个 Claude Code CLI 代理以捕获机密、注入漏洞和不良迁移，在代码落地之前
做了什么
The creator built Manta as a local git workflow that hooks into each commit and runs 11 Claude Code CLI agents automatically before code reaches the repo. Those agents check for hardcoded secrets, OWASP-style issues like injection and XSS, code quality and async/query problems, and unsafe database migrations; when a commit is blocked, it can suggest fixes, while human review is still needed for complex logic.
效果如何
The stated result is earlier detection: dangerous commits are blocked before landing, and the tool is free, open source, and runs with Claude Sonnet on the Claude Code free tier. The author also says it is not standalone and adds a few seconds to each commit.
值得注意
The main catch is that it requires Claude Code CLI and its pre-commit hooks add a few seconds per commit.
试试这个 Prompt
Set up a git pre-commit hook in [repo path] that runs Claude Code to review each staged diff for hardcoded secrets, injection flaws (SQL, command, XSS), and risky database migrations. If it finds a problem, block the commit and print the file, line, and a suggested fix. Show me the hook script and test it on a sample bad commit before installing it permanently.