gitleaks
Detect secrets and API keys leaked in Git repositories.
TLDR
Scan a remote repository
$ gitleaks detect --repo-url [https://github.com/username/repository.git]
Scan a local directory
$ gitleaks detect --source [path/to/repository]
Output scan results to a JSON file
$ gitleaks detect --source [path/to/repository] --report [path/to/report.json]
Use a custom rules file
$ gitleaks detect --source [path/to/repository] --config-path [path/to/config.toml]
Start scanning from a specific commit
$ gitleaks detect --source [path/to/repository] --log-opts [--since=commit_id]
Scan uncommitted changes before a commit
$ gitleaks protect --staged
Display verbose output indicating which parts were identified as leaks during the scan
$ gitleaks protect --staged --verbose
