Google launches Mantis to scan your code for AI leaks

Google's open-sourced Mantis (github.com/google/mantis) is a tool that checks your code for secrets — API keys, tokens, credentials — that might have bled into the codebase when you pasted prompts into your editors or left them in config files.

It's the kind of housekeeping that used to be manual. You'd grep for Bearer, for your AWS key, for the long hex strings that look like nothing but aren't. Mantis does this automatically and flags what needs moving to a real secrets manager. The project is by Momen Basel and is available as a CLI tool you can run before committing.

Why this matters for us: every Brown developer who's copy-pasted a Claude prompt into their terminal has left a token lying around. Mantis catches that before it leaks into a public repo.