Audit git repos for secrets and keys

Installing

go get -u github.com/zricethezav/gitleaks

Usage and Explanation

./gitleaks [options]<url/path>

Options

usage: gitleaks [options] <URL>/<path_to_repo>Options: -u --user              Git user mode -r --repo              Git repo mode -o --org               Git organization mode -l --local             Local mode, gitleaks will look for local repo in <path> -t --temp              Clone to temporary directory -v --verbose           Verbose mode, will output leaks as gitleaks finds them --report-path=<STR>    Save report to path, gitleaks default behavior is to save report to pwd --clone-path=<STR>     Gitleaks will clone repos here, default pwd --concurrency=<INT>    Upper bound on concurrent diffs --regex-file=<STR>     Path to regex file for external regex matching --since=<STR>          Commit to stop at --b64Entropy=<INT>     Base64 entropy cutoff (default is 70) --hexEntropy=<INT>     Hex entropy cutoff (default is 40) -e --entropy           Enable entropy -h --help              Display this message --token=<STR>          Github API token --stopwords            Enables stopwords

Exit Codes

Examples

gitleaks

gitleaks --local$HOME/audits/some/repo

gitleaks https://github.com/some/repo

gitleaks --clone-path=$HOME/Desktop/audits https://github.com/some/repo

gitleaks --temp https://github.com/some/repo

gitleaks --temp -u https://github.com/some-user

gitleaks --regex-file=myregex.txt

[a-z0-9_-]{3,16}[a-z]{3,16}

If you find a valid leak in a repo

Run me with docker

docker build -t gitleaks .docker run --rm --name=gitleaks gitleaks https://github.com/zricethezav/gitleaks

Support