Overview
Gitleaks is an open-source tool designed to scan git repositories, files, and standard input for sensitive information such as passwords, API keys, and tokens. It uses regular expressions and entropy analysis to detect potential secrets within the codebase. Gitleaks supports various installation methods including Homebrew, Docker, and Go. It can be integrated into the development workflow as a pre-commit hook or a GitHub Action. The tool offers configurable rules, reporting formats (JSON, CSV, JUnit, SARIF, template), and ignore paths to customize the scanning process. Gitleaks aims to enhance security by identifying and preventing the accidental exposure of sensitive data in code repositories, contributing to a more secure software development lifecycle.
Common tasks