SecretShield v0.13.2 is here!

I've been working on SecretShield, an open-source tool for detecting and redacting exposed secrets such as API keys, tokens, passwords, and credentials.

With v0.13.2, I've reached a major milestone: standalone builds for Windows, macOS, and Linux.

What is SecretShield?

SecretShield helps developers find exposed secrets in their source code and application output.

Some of its features include:

• Static secret scanning
• Runtime redaction for stdout, stderr, and logging
• Custom detection rules
• Git hooks and GitHub Actions integration
• SARIF export
• Secret detection across multiple providers

The project is local-first, with no telemetry or network calls.

What's new in v0.13.2?

Previously, installing SecretShield generally required Python, pip, and a configured environment.

That changes with this release.

SecretShield now has standalone distributions for:

• Windows
• macOS
• Linux

Windows also gets an installer and a portable ZIP.

The goal was to make SecretShield easier to install and use, even for people who don't work with Python.

Building the standalone distributions

This release involved quite a bit of work beyond simply creating executables.

Some of the challenges included:

• Cross-platform packaging
• Frozen executable compatibility
• Windows Unicode handling
• Installer and upgrade behaviour
• PATH integration
• Automated installation testing

There were multiple CI failures along the way, especially with Windows-specific behaviour. Getting the installer tests to pass was a significant milestone.

Getting started

If you already have Python installed:

pip install --upgrade secretshield

You can also find the standalone distributions on GitHub.

GitHub: https://github.com/Sam3360/secretshield

PyPI: https://pypi.org/project/secretshield/

Website: https://therealsecretshield.freebuff.app/

What's next?

I'm focusing on stabilising the project and completing its final development milestones.

Building SecretShield has been a great learning experience in Python, security tooling, packaging, cross-platform compatibility, and open-source development.

If you check it out, I'd appreciate feedback on the installation experience and how the tool works.

Thanks for reading!