🧰
Open Source Toolkit

Know how to use it before you click: online, self-hosted, desktop, CLI

中文

Gitleaks

gitleaks/gitleaks
Download & install Download and install locally. No server needed.

Find secrets with Gitleaks 🔑

SecuritySecrets managementCommand line
Gitleaks website screenshot

Deploy command

# MacOS
brew install gitleaks

# Docker (DockerHub)
docker pull zricethezav/gitleaks:latest
docker run -v ${path_to_host_folder_to_scan}:/path zricethezav/gitleaks:latest [COMMAND] [OPTIONS] [SOURCE_PATH]

# Docker (ghcr.io)
docker pull ghcr.io/gitleaks/gitleaks:latest
docker run -v ${path_to_host_folder_to_scan}:/path ghcr.io/gitleaks/gitleaks:latest [COMMAND] [OPTIONS] [SOURCE_PATH]

# From Source (make sure `go` is installed)
git clone https://github.com/gitleaks/gitleaks.git
cd gitleaks
make build

Taken from the project README. You need a server with Docker; you may still need to add environment variables.

From the README

Gitleaks is a tool for detecting secrets like passwords, API keys, and tokens in git repos, files, and whatever else you wanna throw at it via stdin. If you wanna learn more about how the detection engine works check out this blog: Regex is (almost) all you need.

Stars
★ 29.5k
Language
Go
License
MIT
Last updated
2026-09-23
Category
Security & privacy
Section
General