gitleaks
Detect secrets and API keys leaked in Git repositories. More information: https://github.com/gitleaks/gitleaks.
- Scan a remote repository:
gitleaks detect --repo-url {{https://github.com/username/repository.git}}
- Scan a local directory:
gitleaks detect --source {{path/to/repository}}
- Output scan results to a JSON file:
gitleaks detect --source {{path/to/repository}} --report {{path/to/report.json}}
- Use a custom rules file:
gitleaks detect --source {{path/to/repository}} --config-path {{path/to/config.toml}}
- Start scanning from a specific commit:
gitleaks detect --source {{path/to/repository}} --log-opts {{--since=commit_id}}
- Scan uncommitted changes before a commit:
gitleaks protect --staged
- Display verbose output indicating which parts were identified as leaks during the scan:
gitleaks protect --staged --verbose
