pygitguardian

import os from pygitguardian import GGClient from pygitguardian.models import ScanResult # It is highly recommended to use environment variables for API keys. # Replace 'YOUR_GITGUARDIAN_API_KEY' with your actual environment variable name if different. api_key = os.environ.get('GITGUARDIAN_API_KEY', '') if not api_key: print("Error: GITGUARDIAN_API_KEY environment variable not set.") exit(1) client = GGClient(api_key=api_key) document_to_scan = """ This is some example content. It might contain sensitive information like a password: mysecretpassword123 or an API key: sk_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx """ try: # Check the health of the API and the API key used first health_check_result = client.health_check() if not health_check_result.success: print(f"API Health Check failed: {health_check_result.detail}") exit(1) print("API Health Check successful.") scan_result: ScanResult = client.content_scan(document_to_scan) if scan_result.has_secrets: print("Secrets found in the document!") for incident in scan_result.incidents: print(f" Incident type: {incident.type}") for pb in incident.policy_breaks: print(f" Policy Break: {pb.occurrence.value}") else: print("No secrets found in the document.") except Exception as e: print(f"An error occurred during scan: {e}")