Gitleaks

Gitleaks is a high-performance open-source secret scanning and credential leak prevention engine designed to detect and prevent hardcoded secrets, API tokens, cryptographic private keys, and passwords within Git repositories and source code files. Hardcoded secrets committed into source control systems represent one of the most common and devastating initial access vectors for cyber adversaries, leading to catastrophic corporate data breaches. Gitleaks inspects Git commit history, active branches, pull requests, and uncommitted files, evaluating code against a comprehensive rule set of regular expressions and Shannon entropy checks to identify over 150 types of sensitive credentials—including AWS access keys, GitHub personal access tokens, Slack webhooks, Stripe API keys, and database passwords. The engine is engineered for exceptional speed, written in Go to scan massive corporate codebases containing millions of commits in minutes. Gitleaks can be deployed as a local pre-commit Git hook that prevents developers from accidentally committing credentials to source control, or integrated natively into CI/CD pipelines such as GitHub Actions, GitLab CI, and Jenkins to fail builds automatically when secrets are detected. Gitleaks empowers engineering organizations to safeguard their source code and prevent secret leaks.