Coverity
Static analysis (SAST) tool for finding defects and vulnerabilities in source code
Discover. Evaluate. Test.
Detects secrets in git repositories and files
Gitleaks is a tool for detecting secrets such as passwords, API keys and tokens in git repositories, files and any content passed through standard input. Its detection engine is mainly based on regular expressions.
Gitleaks can be installed with Homebrew, Docker or Go, or downloaded as a binary for many platforms. It can run as a pre-commit hook in a repository or as a GitHub Action through Gitleaks-Action.
Gitleaks is written in Go and distributed under the MIT licence on GitHub. Its author describes it as feature complete: future releases will contain security patches only, while development of new features moves to a new project, Betterleaks.
There are no reviews yet.