Gitleaks
Visit ToolGitleaks is an open-source security tool that detects secrets like API keys and passwords in Git repositories, files, and stdin. It can be integrated into CI/CD pipelines and pre-commit hooks to prevent credential leaks.
Gitleaks is an open-source security tool that detects secrets like API keys and passwords in Git repositories, files, and stdin. It can be integrated into CI/CD pipelines and pre-commit hooks to prevent credential leaks.
About
Gitleaks is a powerful open-source tool designed to identify and prevent the leakage of sensitive information such as passwords, API keys, and tokens within Git repositories. It scans code, both current and historical, to uncover hardcoded secrets. The tool offers flexible installation options including Homebrew, Docker, and Go, and is available in binary form for various platforms. Gitleaks can be implemented as a pre-commit hook to catch secrets before they are committed, or as a GitHub Action for automated security checks in CI/CD pipelines. It supports different scanning modes for Git repositories, directories, and stdin, and allows for custom rule configurations to tailor detection to specific needs. Users can also create baselines to ignore previously identified findings, streamlining the scanning process for large or historical repositories.
Capabilities
Pricing & Plans
Open Source
Free
FAQs