About Gitleaks
Gitleaks scans Git repositories for hardcoded secrets such as passwords, API keys, and tokens. It is a static application security testing tool, meaning it examines code and stored project data for risky patterns without running the application. It can look for secrets in current or historical repository content, helping teams detect credentials that may have been committed accidentally. The tool is intended both to discover existing secrets and to prevent them from being introduced into repositories. Finding a secret does not revoke or rotate it, so remediation depends on the affected service and credential. The supplied information does not describe scan rules, false-positive handling, integrations, or how results are reported. Gitleaks’ documented role is identifying hardcoded secrets in Git repositories.
Categories
Platforms
Website & Downloads
Trusted package or store listing
Related software
- 0patch Agent — 0patch Agent is a security utility for applying micropatches to vulnerabilities in many programs.
- 3va — 3va is a JavaScript and TypeScript runtime built on the V8 engine.
- A1RunGuard — A1RunGuard is a Windows process firewall for controlling which programs can run.
- AES Crypt — AES Crypt is file-encryption software for Windows that integrates with the desktop and also includes a command-line program.
- Actifile Agent — Actifile Agent is an endpoint tool connected to a software platform for discovering, monitoring, and protecting sensitive data.
- Active Directory Rights Management Services Client 2.1 — Active Directory Rights Management Services Client helps protect access to and use of information handled by compatible applications.
