Find leaked credentials hidden anywhere in code
Gitleaks
Scan code and git history for leaked secrets
About Gitleaks
Gitleaks is a tool that scans git repositories, files, and CI pipelines to detect hardcoded secrets like passwords and API keys. Self-hosting it on a small server, NAS, or VPS keeps the service available on your terms and makes backups and migrations straightforward. Regular community releases, public issue trackers, and extensive documentation help new administrators get from a first install to daily use quickly.
Gitleaks key facts
- Category: Developer Tools
- Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
- Focus areas: secrets, scanner, git, security
- Official site: gitleaks.io
About the Developer Tools category
Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside Gitleaks, it includes TruffleHog, OWASP Dependency-Check, Retire.js, OWASP Dependency-Track.
More in Developer Tools
Comparing tools in the Developer Tools category? These related listings are worth a look: TruffleHog — Find leaked credentials hidden anywhere in code; OWASP Dependency-Check — Identify known vulnerabilities in project dependencies; Retire.js — Scanner for vulnerable JavaScript libraries.
Identify known vulnerabilities in project dependencies
Scanner for vulnerable JavaScript libraries
Software composition analysis with SBOM support
Automated dependency updates across repositories
Helps engineering teams draw architecture diagrams and write technical documents together.