CLI reference
View as Markdowninsecur is experimental and prelaunch. There is no public sign-up yet, and the hosted service is not approved for valuable production secrets. Local Mode runs the development loop with no account.
insecur scan
Offline project-scoped secret exposure report (metadata only)
insecur scan [options]
| Option | Description |
|---|---|
--strict |
exit with code 7 when likely secrets or transcript exposures are found |
--machine |
also scan documented well-known home-directory credential locations (read-only, opt-in) |
--agent-transcripts |
scan local agent conversation logs and transcript exports for secret exposure evidence |
--agent-projects |
discover agent-touched code directories from local conversations, then scan those projects |
--transcript-path <path> |
explicit transcript or log file to scan (repeatable) |
--transcript-glob <pattern> |
glob pattern for exported transcript files (repeatable) |