git-secrets

Install hooks in repository

$ git secrets --install

$ git secrets --register-aws

$ git secrets --add '[pattern]'

$ git secrets --scan

$ git secrets --scan [file.txt]

$ git secrets --list

git secrets command [options]

git-secrets prevents committing secrets and credentials to Git repositories. It installs hooks that scan staged changes against configurable patterns before allowing commits.
The tool was created by AWS Labs to prevent accidental AWS credential commits. It supports custom patterns for other types of secrets.

--install

Install hooks in current repo.

Add AWS secret patterns.

Add forbidden pattern.

Add allowed pattern (exception).

Scan repository for secrets.

Scan entire commit history.

List registered patterns.

Add secret provider command.

Must be installed per-repo or via templates. Only catches patterns, not all secrets. History scanning is slow on large repos. Consider tools like gitleaks for comprehensive scanning.

git-secrets was created by AWS Labs to prevent AWS credential leaks. It's one of several tools addressing the widespread problem of secrets accidentally committed to version control.

git(1), gitleaks(1), trufflehog(1), detect-secrets(1)