gitleaks
Find secrets with Gitleaks 🔑
Tech stack & purpose
Gitleaks is a command-line tool built in Go for detecting secrets such as passwords, API keys, and tokens in git repositories, files, and standard input. The project addresses the security problem domain of data loss prevention and DevSecOps by scanning code—both current and historical—using regex-based pattern matching and entropy analysis to identify hardcoded credentials before they're committed. The tool can be deployed as a standalone CLI application, Docker container, pre-commit hook, or GitHub Action, and supports customizable detection rules through TOML configuration files. According to the README, Gitleaks is now feature complete with only security patches planned for future releases, as the original author has shifted focus to a successor project called Betterleaks.
Community & reference links
Languages
Contributors (top 30 of 235)
- Zachary Rice429 commits
- zricethezav141 commits
- Richard Gomez126 commits
- zach rice120 commits
- Zach22 commits
- Ramon21 commits
- Zachary13 commits
- Bryan Beverly13 commits
- Cristhian Amaya12 commits
- Peter Gallagher12 commits · 22 followers
- bplaxco11 commits
- Roger Meier11 commits
- Baruch Odem (Rothkoff)9 commits
- Ben-grmbl9 commits
- Zach Rice9 commits
- Oleksandr Redko8 commits
- Eduardo Argollo7 commits
- dependabot[bot]6 commits · 0 followers
- Adam Kobi6 commits
- Anant Pathak5 commits
- Joost Voskuil4 commits
- Matthew E. Grahlman4 commits
- Milo Minderbinder4 commits
- amith-legit4 commits
- Craig Smith4 commits
- Eric Ripa4 commits
- foolioo4 commits
- Christophe Goessen3 commits
- Ziyaddin Sadigov3 commits
- arjunyel3 commits
