GitGuardian Power for Amazon Kiro: Secrets Detection Built Into the Agent
GitGuardian is now live on the Kiro Powers marketplace. Install the Power once, and Kiro's agent can help you use GitGuardian tools directly in your workflow. Ask it to scan your repo for secrets with the GitGuardian CLI, or remediate incidents tied to your current project through the GitGuardian MCP server. GitGuardian's CLI, MCP server, and built-in steering files are ready when you need them,…
GitGuardian has launched its first "Power" for Amazon Kiro, a platform that integrates AI-assisted development features. This Power enables Kiro's coding agent to automatically scan for sensitive information such as secrets and API keys directly in the developer's workflow. The integration features include scanning files, Git history, staged changes, Docker images, and PyPI packages.
The Power also installs git pre-commit and pre-push hooks to maintain checks even when humans are committing changes. If any secrets are detected, the agent guides the developer in remediation, suggesting replacements with environment variables or references to a secrets manager. Furthermore, the Power introduces honeytokens, decoy credentials planted in common locations, alerting developers to potential breaches before sensitive data is exposed publicly.
Scanning is handled through GitGuardian's open-source tool, ggshield, which is already installed on over 600,000 developer machines. Setup is simple, requiring only a one-time authentication to the GitGuardian workspace. Once installed, the Power is available for all agents running on Kiro, including Claude Code, Codex, Cursor, VS Code with GitHub Copilot, and Kiro itself.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
