Hacker News
Sieve: Mac App That Scans Cursor, Claude Code, and Copilot Chat History for Leaked API Keys
Sieve is a macOS app that scans AI coding assistant transcript stores (Claude Code, Cursor, VS Code Copilot, Windsurf, Codex) for accidentally leaked secrets — API keys, tokens, passwords, and private keys. All scanning is local; nothing leaves the machine. The tool addresses a gap where AI tools read .env files during normal operation and embed secrets in unencrypted transcript files that standard secret scanners don't check. Claude Code-assisted commits reportedly leak secrets at a 3.2% rate vs. 1.5% baseline — 15 points on HN.
↳ Follow the thread