SafePipe: Secrets Leaks Prevention for CI/CD Pipelines

The growing use of CI/CD pipelines has enhanced the speed of software delivery but also brought with it serious security threats, including the inadvertent exposure of sensitive data like API keys, passwords, and tokens. Current detection tools tend to lack real-time integration, visualization, and automation, thus being inefficient in continuous security monitoring. SafePipe is an open-source and lightweight security framework that identifies and prevents secret leakage during code deployment. It combines automated scanning of files, JSON reporting, and Streamlit-powered visualization dashboard that gives clear results to developers. Its modular architecture supports easy CI/CD integration with less configuration and no vendor lock-in. Experimental tests demonstrate that it detects frequent secret patterns with high accuracy and efficiency. SafePipe thus presents a functional, developer-friendly, and cost- effective solution to pipeline security that can be adopted both in academic research and industrial DevSecOps settings.