Gitleaks

Gitleaks is an open-source secrets detection tool designed to identify passwords, API keys, tokens and other sensitive credentials exposed in Git repositories and files. It can scan repositories, commits and working directories and is commonly integrated into developer and CI/CD workflows. Organizations use Gitleaks to detect hardcoded secrets before they are committed or published and to identify credentials that may already exist in repository history. Its open-source model allows security and engineering teams to customize scanning rules and integrate detection into automated pipelines. Its main value is providing a lightweight and automation-friendly way to reduce credential exposure in source code. Organizations evaluating Gitleaks should consider scanning scope, custom rules, baseline management, false-positive handling and CI/CD integration. It is an open-source tool rather than a paid enterprise secret-management platform.