Show HN: Claude Scrub - redact secrets from Claude Code history on disk

Category: security

Tags: secrets-detection, redaction, claude-code, privacy, security, cli

Score: 6.3/10 (Innovation: 5, Technical: 6, Documentation: 8, Utility: 6)

Claude Scrub is a Go CLI tool that redacts secrets (API keys, passwords, tokens) from Claude Code's on-disk history files by scanning JSON lines, prompt history, and shell snapshots. It combines custom regex heuristics with gitleaks rules and handles JSON escaping edge cases, offering a dry-run mode and a SessionEnd hook for automatic cleanup. The project addresses a real privacy gap in AI coding assistants that persist sensitive data in plaintext.

Target audience: developers using Claude Code, devops, security-conscious engineers

Repository: https://github.com/overflowy/claude-scrub · Go · 1 stars

View on Hacker News