# Gitleaks

A command-line tool that scans git repositories, files and piped input for secrets such as passwords, API keys and tokens.

Gitleaks is a tool for detecting secrets such as passwords, API keys and tokens in git repositories, files, and any other input piped to it through stdin. It can be installed with Homebrew, Docker or Go, and is also distributed as prebuilt binaries for many platforms on its releases page.

Gitleaks can be run as a pre-commit hook directly in a repository, configured through a .pre-commit-config.yaml file that references the Gitleaks repository, or run natively via Docker using a separate pre-commit hook ID. It can also be used as a GitHub Action through the separate Gitleaks-Action project.

The maintainer has marked Gitleaks feature-complete and says future releases will contain security patches only, with continued feature development moving to a separate project called Betterleaks.

Website: https://gitleaks.io