Gitleaks
Gitleaks is a tool that scans code, files and git history to find accidentally saved passwords, API keys and login tokens. It is aimed at programmers and IT teams who want to stop secrets from being shared or published.
How hard it is to start using it. Easy: install it like a normal app, or use it in your browser. Advanced: you run it on your own server, use the command line, or it is a tool for developers.
Features
Finds risky packagesDoes not check packages against known-problem lists; it scans for secrets.
SourceNo
Finds leaked passwords and keys
SourceYes
Stops risky changes automaticallyPre-commit hook or GitHub Action; blocks commits, not a built-in CI setup.
SourcePartly
Dashboard across projectsResults go to terminal or report files only.
SourceNo
Listed in
Finds leaked secrets only; does not check risky packages or dependencies.
How to help
AI contributionsNot stated
The project has not said how it feels about AI-written contributions. Maintainers can set this by claiming the listing.