Gitleaks

Open source

Open source tool that detects hardcoded secrets such as tokens and private keys in git repositories.

by Gitleaks ProjectOfficial site ↗Source code ↗

Pricing: free
Free tier: true
License: open-source
Open source: Yes

Editorial review

Gitleaks has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Tags(open-source;cloud-native): secret scanning, security, devsecops, open source, GoVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerified
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerification pending
Source repository(HTTPS URL): https://github.com/gitleaks/gitleaksVerified
SPDX license IDs(Apache-2.0;MIT): MITVerified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Detecting secrets like passwords, API keys, and tokens in git repos, Scanning files and stdin input, Pre-commit hook implementation, Proximity matching with withinLines and withinColumns rules, Installable via Homebrew, Docker, Go, or prebuilt binariesVerification pending

Api · Integrations · Ecosystem

CLI(true/false): trueVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Developers and security teams scanning git repos, files, and CI pipelines for leaked passwords, API keys, and tokens.Verification pending
Primary use cases(build;monitor;automate): Secret scanning in git repositories, CI pipeline secret detection via GitHub Action, Pre-commit secret preventionVerification pending

Lifecycle · Versioning

Maintenance status(active;maintenance;deprecated;EOL;archived): maintenanceVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): communityVerified

User reviews

Review policy

No published reviews yet.