Repository files navigation

Gitleaks is a SAST tool for detecting hardcoded secrets like passwords, api keys, and tokens in git repos. Gitleaks aims to be theeasy-to-use, all-in-one solution for finding secrets, past or present, in your code.

• Scans forcommited secrets
• Scans foruncommitted secrets as part of shifting security left
• AvailableGithub Action
• Gitlab and Github API support which allows scans of whole organizations, users, and pull/merge requests
• Custom rules via toml configuration
• High performance usinggo-git
• JSON and CSV reporting
• Private repo scans using key or password based authentication

This project is documentedhere

Gamma proactively detects and remediates data leaks across cloud apps. Scan your public repos for secret leaks withGamma

These users aresponsors of gitleaks:

The Gitleaks logo uses the Git Logo createdJason Long is licensed under theCreative Commons Attribution 3.0 Unported License.